database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-07-18 17:42:25 +03:00
Code Activity

Add alternative output for OpenSSL 3 without legacy loaded

Browse Source 
OpenSSL 3 introduced the concept of providers to support modularization,
and moved the outdated ciphers to the new legacy provider. In case it's
not loaded in the users openssl.cnf file there will be a lot of regress
test failures, so add alternative outputs covering those.

Also document the need to load the legacy provider in order to use older
ciphers with OpenSSL-enabled pgcrypto.

This will be backpatched to all supported version once there is sufficient
testing in the buildfarm of OpenSSL 3.

Reviewed-by: Michael Paquier
Discussion: https://postgr.es/m/FEF81714-D479-4512-839B-C769D2605F8A@yesql.se
Backpatch-through: 9.6
This commit is contained in:
Daniel Gustafsson
2021-09-25 11:27:28 +02:00
parent 00c72da4a2
commit 7b6ce36fba
6 changed files with 1254 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
doc/src/sgml/pgcrypto.sgml
View File

@ -1225,6 +1225,13 @@ gen_random_uuid() returns uuid
</tgroup>
</table>
<para>
When compiled against <productname>OpenSSL</productname> 3.0.0 and later
versions, the legacy provider must be activated in the
<filename>openssl.cnf</filename> configuration file in order to use older
ciphers like DES or Blowfish.
</para>
<para>
Notes:
</para>