Horton

Re: OpenSSL 3.0.0 compatibility

Michael Paquier <michael@paquier.xyz>

View thread View on postgr.es
From: Michael Paquier <michael@paquier.xyz>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, Daniel Gustafsson <daniel@yesql.se>, PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Date: 2020-07-16T11:45:55Z
Lists: pgsql-hackers 
On Thu, Jul 16, 2020 at 10:58:58AM +0200, Peter Eisentraut wrote:
>  if test "$with_openssl" = yes ; then
>    dnl Order matters!
> +  AC_DEFINE(OPENSSL_API_COMPAT, [10001],
> +            [Define to the OpenSSL API version in use. This avoids
>    deprecation warnings from newer OpenSSL versions.])
>    if test "$PORTNAME" != "win32"; then

I think that you should additionally mention the version number
directly in the description, so as when support for 1.0.1 gets removed
it is possible to grep for it, and then adjust the number and the
description.
--
Michael

Commits

  1. Define OPENSSL_API_COMPAT

  2. Add alternative output for OpenSSL 3 without legacy loaded

  3. Disable OpenSSL EVP digest padding in pgcrypto

  4. pgcrypto: Check for error return of px_cipher_decrypt()

  5. OpenSSL 3.0.0 compatibility in tests

  6. Make ssl certificate for ssl_passphrase_callback test via Makefile

  7. Provide a TLS init hook