From: Tom Lane <tgl@sss.pgh.pa.us>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
cc: Heikki Linnakangas <hlinnaka@iki.fi>,
 Andreas Karlsson <andreas@proxel.se>,
        Victor Wagner <vitus@wagner.pp.ru>, pgsql-hackers@postgresql.org,
        Christoph Berg <myon@debian.org>
Subject: Re: OpenSSL 1.1 breaks configure and more
In-reply-to: <0202d5cd-bd0f-9084-70ec-649a40d0cba9@2ndquadrant.com>
References: <20160627151604.GD1051@msg.df7cb.de>
 <1805.1467041061@sss.pgh.pa.us>
 <8a0a5959-0b83-3dc8-d9e7-66ce8c1c5bc7@proxel.se>
 <688a438c-ccc2-0431-7100-26e418fc3bca@proxel.se>
 <20160705121347.5c5c702f@fafnir.local.vm>
 <34821a62-ac89-ffb2-7516-7a8b15c04723@proxel.se>
 <7ff5558f-cff5-3768-2fb3-6b50b58294e5@iki.fi>
 <0202d5cd-bd0f-9084-70ec-649a40d0cba9@2ndquadrant.com>
Comments: In-reply-to Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
	message dated "Fri, 26 Aug 2016 12:36:30 -0400"
Date: Fri, 26 Aug 2016 12:44:51 -0400
Message-ID: <28990.1472229891@sss.pgh.pa.us>
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes:
> On 8/26/16 5:31 AM, Heikki Linnakangas wrote:
>> I think now would be a good time to drop support for OpenSSL versions 
>> older than 0.9.8. OpenSSL don't even support 0.9.8 anymore, although 
>> there are probably distributions out there that still provide patches 
>> for it. But OpenSSL 0.9.7 and older are really not interesting for 
>> PostgreSQL 10 anymore, I think.

> CentOS 5 currently ships 0.9.8e.  That's usually the oldest OS we want
> to support eagerly.

Also, I get this on fully-up-to-date OS X (El Capitan):

$ openssl version
OpenSSL 0.9.8zh 14 Jan 2016

Worth noting though is that without -Wno-deprecated-declarations, you
find that Apple has sprinkled the entire OpenSSL API with deprecation
warnings.  That suggests that their plan for the future is to drop it
rather than update it.  Should we be thinking ahead to that?

			regards, tom lane

PS: I still have 0.9.7 on some of my buildfarm critters.  But I could
either update them, or stop using --with-openssl there.


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers