Remove incorrect OpenSSL feature guards
Daniel Gustafsson <dgustafsson@postgresql.org>
Author:
Daniel Gustafsson <dgustafsson@postgresql.org>
Date: 2026-05-27T10:58:56Z
Releases:
19 (unreleased)
Remove incorrect OpenSSL feature guards Commit 316472146 introduced support for ECDH key exchange with an ifdef guard to ensure support in the underlying OpenSSL installation. Commit 10bf4fc2c3 in OpenSSL removed this guard in 2015 which effectively made our check a no-op. There has been no complaints that this doesn't work and OpenSSL installations without ECDH support are likely very rare, so remove the checks rather than re-implementing support. Not backpatched since this fix doesn't alter functionality. Also fix a typo introduced in the original commit which had survived till this day. Author: Daniel Gustafsson <daniel@yesql.se> Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/1787BA9F-A11C-4A7A-9252-94C470D5CBE3@yesql.se
Files
| Path | Change | +/− |
|---|---|---|
| src/backend/libpq/be-secure.c | modified | +1 −1 |
| src/backend/libpq/be-secure-openssl.c | modified | +0 −4 |
Discussion
- Removing broken support for OpenSSL without ECDH 3 messages · 2026-05-22 → 2026-05-26