From: Daniel Gustafsson <dgustafsson@postgresql.org>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: Raise the minimum supported OpenSSL version to 1.1.1
Date: Thu, 24 Oct 2024 13:38:04 +0000
Message-ID: <E1t3y2P-002EUT-BC@gemulon.postgresql.org> (raw)
Raise the minimum supported OpenSSL version to 1.1.1
Commit a70e01d4306fdbcd retired support for OpenSSL 1.0.2 in order to get
rid of the need for manual initialization of the library. This left our
API usage compatible with 1.1.0 which was defined as the minimum required
version. Also mention that 3.4 is the minimum version required when using
LibreSSL.
An upcoming commit will introduce support for configuring TLSv1.3 cipher
suites which require an API call in OpenSSL 1.1.1 and onwards. In order
to support this setting this commit will set v1.1.1 as the new minimum
required version. The version-specific call for randomness init added
in commit c3333dbc0c0 is removed as it's no longer needed.
Author: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://postgr.es/m/909A668B-06AD-47D1-B8EB-A164211AAD16@yesql.se
Discussion: https://postgr.es/m/tencent_063F89FA72CCF2E48A0DF5338841988E9809@qq.com
Branch
------
master
Details
-------
https://git.postgresql.org/pg/commitdiff/6c66b7443cebf3ff09ea76416a20fb6bb1d32a52
Modified Files
--------------
configure | 32 ++++++++++++++------------------
configure.ac | 12 ++++--------
doc/src/sgml/installation.sgml | 12 ++++++++++--
meson.build | 10 +++-------
src/include/pg_config.h.in | 6 +++---
src/port/pg_strong_random.c | 14 ++++----------
6 files changed, 38 insertions(+), 48 deletions(-)
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-committers@postgresql.org
Cc: dgustafsson@postgresql.org, pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Raise the minimum supported OpenSSL version to 1.1.1
In-Reply-To: <E1t3y2P-002EUT-BC@gemulon.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox