pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: Andreas Karlsson <andreas@proxel.se>
Cc: Victor Wagner <vitus@wagner.pp.ru>
Cc: pgsql-hackers@postgresql.org, Christoph Berg <myon@debian.org>
Subject: Re: OpenSSL 1.1 breaks configure and more
Date: Fri, 26 Aug 2016 12:44:51 -0400
Message-ID: <28990.1472229891@sss.pgh.pa.us> (raw)
In-Reply-To: <0202d5cd-bd0f-9084-70ec-649a40d0cba9@2ndquadrant.com>
References: <20160627151604.GD1051@msg.df7cb.de>
	<1805.1467041061@sss.pgh.pa.us>
	<8a0a5959-0b83-3dc8-d9e7-66ce8c1c5bc7@proxel.se>
	<688a438c-ccc2-0431-7100-26e418fc3bca@proxel.se>
	<20160705121347.5c5c702f@fafnir.local.vm>
	<34821a62-ac89-ffb2-7516-7a8b15c04723@proxel.se>
	<7ff5558f-cff5-3768-2fb3-6b50b58294e5@iki.fi>
	<0202d5cd-bd0f-9084-70ec-649a40d0cba9@2ndquadrant.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>

Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes:
> On 8/26/16 5:31 AM, Heikki Linnakangas wrote:
>> I think now would be a good time to drop support for OpenSSL versions 
>> older than 0.9.8. OpenSSL don't even support 0.9.8 anymore, although 
>> there are probably distributions out there that still provide patches 
>> for it. But OpenSSL 0.9.7 and older are really not interesting for 
>> PostgreSQL 10 anymore, I think.

> CentOS 5 currently ships 0.9.8e.  That's usually the oldest OS we want
> to support eagerly.

Also, I get this on fully-up-to-date OS X (El Capitan):

$ openssl version
OpenSSL 0.9.8zh 14 Jan 2016

Worth noting though is that without -Wno-deprecated-declarations, you
find that Apple has sprinkled the entire OpenSSL API with deprecation
warnings.  That suggests that their plan for the future is to drop it
rather than update it.  Should we be thinking ahead to that?

			regards, tom lane

PS: I still have 0.9.7 on some of my buildfarm critters.  But I could
either update them, or stop using --with-openssl there.


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers



view thread (57+ messages)  latest in thread

Message-ID: <28990.1472229891@sss.pgh.pa.us>
Permalink:  ../28990.1472229891@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/28990.1472229891@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, peter.eisentraut@2ndquadrant.com, hlinnaka@iki.fi, andreas@proxel.se, vitus@wagner.pp.ru, myon@debian.org
  Subject: Re: OpenSSL 1.1 breaks configure and more
  In-Reply-To: <28990.1472229891@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox