From: Michael Paquier <michael@paquier.xyz>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Daniel Gustafsson <daniel@yesql.se>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: Update minimum SSL version
Date: Sat, 30 Nov 2019 11:43:45 +0900
Message-ID: <20191130024345.GD99291@paquier.xyz> (raw)
In-Reply-To: <13786.1575041447@sss.pgh.pa.us>
References: <b327f8df-da98-054d-0cc5-b76a857cfed9@2ndquadrant.com>
<224FD25C-BA10-44FA-95AA-F97C35FB3BB0@yesql.se>
<CABUevEy4meLCVnrTbjU9zoJvRoWUjvmdmUUkaoAqKYkk0MWHYA@mail.gmail.com>
<20191129125727.GN2505@paquier.xyz>
<13786.1575041447@sss.pgh.pa.us>
On Fri, Nov 29, 2019 at 10:30:47AM -0500, Tom Lane wrote:
> What's the impact going to be on buildfarm members with older openssl
> installations? Perhaps "none", if they aren't running the ssl test
> suite, but we should be clear about it.
The buildfarm logs don't directly report the version of OpenSSL used
as far as I recalled, and a quick lookup shows that.. Anyway, I
recall that all Windows buildfarm members linking to OpenSSL use at
least 1.0.2 on HEAD. For the others, I would be ready to suspect that
some of them are still using 0.9.8 and 1.0.0.
Anyway, as we still support OpenSSL down to 0.9.8 on HEAD, shouldn't
we just patch the SSL TAP tests to make sure that we don't enforce an
incorrect minimum version at configuration time?
[... thinks more ...]
Actually, no, what I am writing here is incorrect. We should make
sure of that the default configuration is correct at initdb time, and
the patch does not do that.
--
Michael
Attachments:
[application/pgp-signature] signature.asc (832B, ../20191130024345.GD99291@paquier.xyz/2-signature.asc)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: michael@paquier.xyz, tgl@sss.pgh.pa.us, magnus@hagander.net, daniel@yesql.se, peter.eisentraut@2ndquadrant.com
Subject: Re: Update minimum SSL version
In-Reply-To: <20191130024345.GD99291@paquier.xyz>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox