Date: Mon, 6 Jan 2020 13:58:58 +0900
From: Michael Paquier <michael@paquier.xyz>
To: pgsql-committers@lists.postgresql.org
Cc: Andrew Dunstan <andrew@dunslane.net>
Subject: Re: pgsql: Remove support for OpenSSL 0.9.8 and 1.0.0
Message-ID: <20200106045858.GJ3598@paquier.xyz>
References: <E1ioJS0-0005f9-7G@gemulon.postgresql.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="Z9t8O/5YJLB6LEUl"
Content-Disposition: inline
In-Reply-To: <E1ioJS0-0005f9-7G@gemulon.postgresql.org>
Precedence: bulk


--Z9t8O/5YJLB6LEUl
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 06, 2020 at 03:53:08AM +0000, Michael Paquier wrote:
> Remove support for OpenSSL 0.9.8 and 1.0.0
>=20
> Support is out of scope from all the major vendors for these versions
> (for example RHEL5 uses a version based on 0.9.8, and RHEL6 uses 1.0.1),
> and it created some extra maintenance work.  Upstream has stopped
> support of 0.9.8 in December 2015 and of 1.0.0 in February 2016.
>=20
> Since b1abfec, note that the default SSL protocol version set with
> ssl_min_protocol_version is TLSv1.2, whose support was added in OpenSSL
> 1.0.1, so there is no point to enforce ssl_min_protocol_version to TLSv1
> in the SSL tests.

So the buildfarm is not that bad, I have spotted one failure from
nightjar:
https://buildfarm.postgresql.org/cgi-bin/show_log.pl?nm=3Dnightjar&dt=3D202=
0-01-06%2003%3A54%3A10

/pgbuild/root/HEAD/pgsql.build/../pgsql/src/interfaces/libpq/fe-secure-open=
ssl.c:
In function 'initialize_SSL':
/pgbuild/root/HEAD/pgsql.build/../pgsql/src/interfaces/libpq/fe-secure-open=
ssl.c:1198:
error: 'SSL_OP_NO_COMPRESSION' undeclared (first use in this function)
/pgbuild/root/HEAD/pgsql.build/../pgsql/src/interfaces/libpq/fe-secure-open=
ssl.c:1198:
error: (Each undeclared identifier is reported only once
/pgbuild/root/HEAD/pgsql.build/../pgsql/src/interfaces/libpq/fe-secure-open=
ssl.c:1198:
error: for each function it appears in.)

And this means that the version likely used here should be 0.9.8.
FreeBSD 9 is EOL since March 2013 based on Wikipedia-Sensei's data:
https://en.wikipedia.org/wiki/FreeBSD
--
Michael

--Z9t8O/5YJLB6LEUl
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=ryOI
-----END PGP SIGNATURE-----

--Z9t8O/5YJLB6LEUl--