database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-08-18 12:22:09 +03:00
Code Activity

Remove support for OpenSSL older than 1.1.0

Browse Source 
OpenSSL 1.0.2 has been EOL from the upstream OpenSSL project for
some time, and is no longer the default OpenSSL version with any
vendor which package PostgreSQL. By retiring support for OpenSSL
1.0.2 we can remove a lot of no longer required complexity for
managing state within libcrypto which is now handled by OpenSSL.

Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Reviewed-by: Peter Eisentraut <peter@eisentraut.org>
Reviewed-by: Michael Paquier <michael@paquier.xyz>
Discussion: https://postgr.es/m/ZG3JNursG69dz1lr@paquier.xyz
Discussion: https://postgr.es/m/CA+hUKGKh7QrYzu=8yWEUJvXtMVm_CNWH1L_TLWCbZMwbi1XP2Q@mail.gmail.com
This commit is contained in:
Daniel Gustafsson
2024-09-02 13:51:48 +02:00
parent 6ebeeae296
commit a70e01d430
18 changed files with 53 additions and 574 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
src/interfaces/libpq/fe-secure.c
View File

@@ -108,42 +108,27 @@ PQsslInUse(PGconn *conn)
}
/*
* Exported function to allow application to tell us it's already
* initialized OpenSSL.
* Exported function to allow application to tell us it's already initialized
* OpenSSL. Since OpenSSL 1.1.0 it is no longer required to explicitly
* initialize libssl and libcrypto, so this is a no-op. This function remains
* for backwards API compatibility.
*/
void
PQinitSSL(int do_init)
{
#ifdef USE_SSL
pgtls_init_library(do_init, do_init);
#endif
/* no-op */
}
/*
* Exported function to allow application to tell us it's already
* initialized OpenSSL and/or libcrypto.
* Exported function to allow application to tell us it's already initialized
* OpenSSL. Since OpenSSL 1.1.0 it is no longer required to explicitly
* initialize libssl and libcrypto, so this is a no-op. This function remains
* for backwards API compatibility.
*/
void
PQinitOpenSSL(int do_ssl, int do_crypto)
{
#ifdef USE_SSL
pgtls_init_library(do_ssl, do_crypto);
#endif
}
/*
* Initialize global SSL context
*/
int
pqsecure_initialize(PGconn *conn, bool do_ssl, bool do_crypto)
{
int r = 0;
#ifdef USE_SSL
r = pgtls_init(conn, do_ssl, do_crypto);
#endif
return r;
/* no-op */
}
/*