pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: Daniel Gustafsson <daniel@yesql.se>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: Update minimum SSL version
Date: Wed, 04 Dec 2019 20:50:01 -0500
Message-ID: <12767.1575510601@sss.pgh.pa.us> (raw)
In-Reply-To: <e5b76e74-12be-a67a-b916-f0ae4ab2f860@2ndquadrant.com>
References: <CABUevEy4meLCVnrTbjU9zoJvRoWUjvmdmUUkaoAqKYkk0MWHYA@mail.gmail.com>
	<20191129125727.GN2505@paquier.xyz>
	<13786.1575041447@sss.pgh.pa.us>
	<20191130024345.GD99291@paquier.xyz>
	<CA+TgmobM7j=+NN+juu9=urfw0-Bt22QvDdxaPW8O-KK5yegADQ@mail.gmail.com>
	<929.1575304768@sss.pgh.pa.us>
	<CA+TgmoY4E8J3id=0xJW9m3vLwdLaOoYefj334nZpLx26T-XftA@mail.gmail.com>
	<4448.1575309086@sss.pgh.pa.us>
	<20191203035323.GB1634@paquier.xyz>
	<CABUevEyNhpHpH3UCxJ8B5nm9dHtxQStj8=yVu+BWYNd84AoQ0g@mail.gmail.com>
	<20191203110854.GG1634@paquier.xyz>
	<CABUevEyxxFb1CL_V1knnV65O6tK_EGJOysfSXz1o-a-LanOs7Q@mail.gmail.com>
	<6d3b7b69-0970-4d40-671a-268c46e93fe3@2ndquadrant.com>
	<12313.1575464001@sss.pgh.pa.us>
	<e5b76e74-12be-a67a-b916-f0ae4ab2f860@2ndquadrant.com>

Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes:
> On 2019-12-04 13:53, Tom Lane wrote:
>> So, what exactly are we going to set as the new minimum version in
>> each case?  I'll have to go update my trailing-edge-Johnnie buildfarm
>> critters, and it'd make sense to have them continue to test the
>> oldest nominally-supported versions.
>> 
>> For OpenSSL it seems like 1.0.1a is the target, per the above
>> discussion.
>> 
>> For Python, I'll just observe that RHEL6 ships 2.6.6, so we can't
>> bump up to 2.7.

> Yes, it would be Python 2.6.

So the upshot, after a fair amount of hair-pulling, is

* Somebody maybe should be testing openssl 1.0.1, but it won't be
me, because neither 1.0.1 nor 1.0.1a will even build on non-Intel
platforms.  After closer study of their release notes, I've settled
on 1.0.1e as being the best compromise between being old and not
having unreasonable teething pains.  (I wonder how coincidental
it is that that's also what Red Hat is now shipping in RHEL6.)
I've successfully installed 1.0.1e on prairiedog and gaur, so
I can flip them to start building HEAD with that whenever we
break compatibility with 0.9.8.

* Python 2.6.x also suffered from an unreasonable amount of
teething pains --- 2.6.2 is the oldest version that seems
to know how to build a shared library on Darwin.  I've now
got a reasonably functional 2.6 on gaur and 2.6.2 on prairiedog,
and again will adjust those buildfarm members to use those
installations when/if our support for their current versions
goes away.

			regards, tom lane





view thread (38+ messages)  latest in thread

Message-ID: <12767.1575510601@sss.pgh.pa.us>
Permalink:  ../12767.1575510601@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/12767.1575510601@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, peter.eisentraut@2ndquadrant.com, magnus@hagander.net, michael@paquier.xyz, robertmhaas@gmail.com, daniel@yesql.se
  Subject: Re: Update minimum SSL version
  In-Reply-To: <12767.1575510601@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox