Re: OpenSSL 1.1 breaks configure and more

Heikki Linnakangas <hlinnaka@iki.fi>

From: Heikki Linnakangas <hlinnaka@iki.fi>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>, Andreas Karlsson <andreas@proxel.se>, Tom Lane <tgl@sss.pgh.pa.us>
Cc: Victor Wagner <vitus@wagner.pp.ru>, pgsql-hackers@postgresql.org, Christoph Berg <myon@debian.org>
Date: 2016-08-29T17:22:22Z
Lists: pgsql-hackers
On 08/27/2016 05:15 PM, Peter Eisentraut wrote:
> On 8/26/16 9:26 PM, Andreas Karlsson wrote:
>> I have attached a patch which removes the < 0.9.8 compatibility code.
>> Should we also add a version check to configure? We do not have any such
>> check currently.
>
> I think that is not necessary.

I was going to change the configure test to check for a different 
function that we use, that's only present in 0.9.8 and later. But the 
only such functions were related to ECDH, and the use of those functions 
is inside "#ifndef OPENSSL_NO_ECDH", so they're not suitable for the 
autoconf test. So I gave up. If you try to build with 0.9.7, you'll get 
compilation errors because of those ECDH symbols, and with 0.9.6, 
probably on some other symbols.

Pushed with some small doc fixes, thanks Andreas! I'll continue 
reviewing the rest of the patches.

- Heikki



Commits

  1. Back-patch 9.4-era SSL renegotiation code into 9.3 and 9.2.