Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1waKLp-001hsQ-1Y for pgsql-hackers@arkaria.postgresql.org; Thu, 18 Jun 2026 21:32:41 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1waKLo-00Dgx8-0D for pgsql-hackers@arkaria.postgresql.org; Thu, 18 Jun 2026 21:32:40 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1waKLn-00Dgx0-2V for pgsql-hackers@lists.postgresql.org; Thu, 18 Jun 2026 21:32:39 +0000 Received: from mail-qv1-xf2e.google.com ([2607:f8b0:4864:20::f2e]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1waKLl-000000012OJ-31yR for pgsql-hackers@lists.postgresql.org; Thu, 18 Jun 2026 21:32:38 +0000 Received: by mail-qv1-xf2e.google.com with SMTP id 6a1803df08f44-8ccf01ba514so12317106d6.0 for ; Thu, 18 Jun 2026 14:32:36 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1781818356; cv=none; d=google.com; s=arc-20240605; b=Qwyd2m21R9pC0KtRUqy5ERTeqRFe2psYsjVCTgcicJoPvdu0rWBI7Qpz+nCCCKE5ut oZLbHaJuhspVGpa6QdC1JoDHKxqrqxXNB3o1nFUt/fyjfOQgZXi7ALx+Kl46e8VXvHXU 87XWHc+oqnftjmDNsA02YQv+0iux/sz9qKmg0SHUT+pjNzD0gISneoskAAHmEn9+Is9T 2B1TZYOS03y3zlbq6f6xvcZ+r2+c6d3ZR5IPzp36D5SQkMG4JndccY4S7GxKF/vU2XVm tjGh9loV3K5yNDi5hje4D/gcezFj5kOlcNykhYckSOseoQjR73GrCIbf8EuaRmOO+dm4 o6Bg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=i6hYsgntj6phZMl9k2nNrRmUX5n4QB52PON1ivSSbnY=; fh=mj8VT54/8QCRi/9FNLfSVnNgEe+2e0A1g/EFlhBLeB8=; b=SuLc0flFsE//9rkXZ8bZSSAhDkOSntFbRPHzrFeJSZX8/Fm488VeQP8oZnwJlx7edx rDVMTT2fseOsGT1OFG+VwQ6acHNUrUik5Y4UelIMQZYMY63QlX8kkHNh/6GxuYP4hTEH Ahi+uXilxtY9d4bkX2MA2p40lm9BRWYnTl1yxGfbgm6pC6MIaPbSXlCxrsUj4Zf6kKo7 WT5hM3DZ3ruCh4pXFIr4I7CNOmcWp7agEW/6TM2h+NpacP9z4cRDx0CwqaEn0HMRA6Ej ueMbcybCCBLTjbgVtPi9XvhEaTHvosh4FE2+kpxx+ya6a/0fL3epaY3kAQcqE+KkDje+ RcUQ==; darn=lists.postgresql.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1781818356; x=1782423156; darn=lists.postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=i6hYsgntj6phZMl9k2nNrRmUX5n4QB52PON1ivSSbnY=; b=LK/Xiiv8IOxylc6/FJVOY9hYeshQ8NcHl4mBa40KzNjItCZIwKrQW3lEDvqsBoOvqc p31nv0nrzQH0ChW/gSv399xVzootCwgDLRTT4Px3F/qi7jqRaBkEO96dECJoRFgIIiy6 x9pZu+cunq65jIdVjevKO1plODay1UDQywiEHpOaR0xWxHvJsKX0zVm497zGmXcm1L7X IpsNZ+ye7bD32W4d3Xb/e62JLOAKH34qD+9nskCkFaUk6niRvhDOW9IMq7D/XQwbUiZK v9GKGyastXAVlvcmXAlXanfhbq2shhMlZ8p2BMC6VdJM687fksvtwpgx4v5l8rEHTy7V z3Lg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781818356; x=1782423156; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=i6hYsgntj6phZMl9k2nNrRmUX5n4QB52PON1ivSSbnY=; b=g/yUuQWl8N0uPttnEmWOYV4vn+KgKpiFmF+jGkXJ+yepbPJT1Ibcw2zT1xxzQn7kss K9cq/8GoUp64Upzrj7IpoLeLOa6yTGB97Z91hvpN6ZxwY4QRmranM6n9/bL5zPl7pert 7qgpTYnOjmuAUrB3AqUZvN2t5zXCBOBlTUFFpv/WhOPo8GCV+N+euRm4VEcrrSTk59js uwHbA1OTevyhtuoE3AKkWxYtV/COw4Hwa+K3f8R3KtsprGEHa+ionzSMSeUlSjHT15zY GKpJRnLibgmOjnfrbdIvZMg1qnEyYR4ivyq0JF+4VZwNGD6zTmAkOGl/eAFYqTafrduA 7xjA== X-Gm-Message-State: AOJu0YwJE28UzMPKbhg70tZcJBH4z+gIzBDe4cAc/dsJ9dgp/SzMoIOp 5lzyD5AKQ4085N10TnwQhKUIcEtR0Lo39aMvNtlaB1UJ+zSHp6bdWGz26f3xDrmTL/IMy0ReCB+ yzrdF+4AQhzuIH9B45A5KFDahPWC+OsJhsFs1pTxEcukRRsJAlF+lZbEM X-Gm-Gg: AfdE7clAfVBQP7hWultKaz0O17QpdnCNswhmgyXiTSeOtGn4MaO5LKQ7xVqDX1JkLnB h/bCQ/tBtpkF6VbwHMOUnlSETvmDqhW/oA8OH0EQ5EH4p1eEbHPs/QOMJ0707cV20yJOZSSMge5 2lx7XBSWyKkW6ejY/jgoKYyzK0sHa3E0pu2H60Q59Jdpub91pvxpm+OJSinmsNqCx7WwljJuk45 IQjPq41VlQqM0gk6YjfnpJ+Mipi2OVgre9YcSGn8Br2Dz6N42DbhF26wXUs+BRRkQVt3hGAmGY= X-Received: by 2002:ad4:5943:0:b0:8cc:dd20:7a46 with SMTP id 6a1803df08f44-8de3e9e790bmr18227596d6.37.1781818355858; Thu, 18 Jun 2026 14:32:35 -0700 (PDT) MIME-Version: 1.0 References: <1050A00D-0076-4E8B-9179-1AEB69863F84@yesql.se> In-Reply-To: <1050A00D-0076-4E8B-9179-1AEB69863F84@yesql.se> From: Jacob Champion Date: Thu, 18 Jun 2026 14:32:23 -0700 X-Gm-Features: AVVi8CccaYZHflLMoj9KZ33VHuF-bMnna1nvcata-92ILrB2dMl9NzoPj3sItwI Message-ID: Subject: Re: PG20 Minimum Dependency Thread To: Daniel Gustafsson Cc: PostgreSQL Hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Thu, Jun 18, 2026 at 2:06=E2=80=AFPM Daniel Gustafsson = wrote: > The entire OpenSSL 3.x line will be down to just 3.5 LTS by the time we s= hip > v20. Yeah. Though RH have been apparently shipping breaking updates to OpenSSL in RHEL 9+, so the conversation may look completely different when we get to those EOLs. > One complicating factor when it comes to OpenSSL is that we need the 1.1.= 1 API > support in order to keep LibreSSL supported. True -- but I think that even if your split didn't land, surrounding the necessary code with `#ifdef LIBRESSL_VERSION_NUMBER` would be a big maintainability upgrade compared to "all code paths must support both OpenSSL 1.1.1 _and_ LibreSSL which is kind-of-not-really-the-same". --Jacob