From: Heikki Linnakangas <hlinnaka@iki.fi>
To: Tom Lane <tgl@sss.pgh.pa.us>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Andreas Karlsson <andreas@proxel.se>
Cc: Victor Wagner <vitus@wagner.pp.ru>
Cc: pgsql-hackers@postgresql.org, Christoph Berg <myon@debian.org>
Subject: Re: OpenSSL 1.1 breaks configure and more
Date: Fri, 26 Aug 2016 20:04:07 +0300
Message-ID: <facdf273-233a-009a-9bb4-7c3e8162de26@iki.fi> (raw)
In-Reply-To: <28990.1472229891@sss.pgh.pa.us>
References: <20160627151604.GD1051@msg.df7cb.de>
<1805.1467041061@sss.pgh.pa.us>
<8a0a5959-0b83-3dc8-d9e7-66ce8c1c5bc7@proxel.se>
<688a438c-ccc2-0431-7100-26e418fc3bca@proxel.se>
<20160705121347.5c5c702f@fafnir.local.vm>
<34821a62-ac89-ffb2-7516-7a8b15c04723@proxel.se>
<7ff5558f-cff5-3768-2fb3-6b50b58294e5@iki.fi>
<0202d5cd-bd0f-9084-70ec-649a40d0cba9@2ndquadrant.com>
<28990.1472229891@sss.pgh.pa.us>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
On 08/26/2016 07:44 PM, Tom Lane wrote:
> Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes:
>> On 8/26/16 5:31 AM, Heikki Linnakangas wrote:
>>> I think now would be a good time to drop support for OpenSSL versions
>>> older than 0.9.8. OpenSSL don't even support 0.9.8 anymore, although
>>> there are probably distributions out there that still provide patches
>>> for it. But OpenSSL 0.9.7 and older are really not interesting for
>>> PostgreSQL 10 anymore, I think.
>
>> CentOS 5 currently ships 0.9.8e. That's usually the oldest OS we want
>> to support eagerly.
>
> Also, I get this on fully-up-to-date OS X (El Capitan):
>
> $ openssl version
> OpenSSL 0.9.8zh 14 Jan 2016
Ok, sold, let's remove support for OpenSSL < 0.9.8.
> Worth noting though is that without -Wno-deprecated-declarations, you
> find that Apple has sprinkled the entire OpenSSL API with deprecation
> warnings. That suggests that their plan for the future is to drop it
> rather than update it. Should we be thinking ahead to that?
Yeah, they want people to move to their own SSL library [1]. I doubt
they will actually remove it any time soon, but who knows. It would be a
good project for someone with an OS X system and some spare time, to
write a patch to build with OS X's native SSL library instead of
OpenSSL. The code is structured nicely to enable that now.
[1] I couldn't find any official statement, but lots of blog posts
saying the same thing.
- Heikki
--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: hlinnaka@iki.fi, tgl@sss.pgh.pa.us, peter.eisentraut@2ndquadrant.com, andreas@proxel.se, vitus@wagner.pp.ru, myon@debian.org
Subject: Re: OpenSSL 1.1 breaks configure and more
In-Reply-To: <facdf273-233a-009a-9bb4-7c3e8162de26@iki.fi>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox