Re: Should we back-patch SSL renegotiation fixes?

Поиск
Список
Период
Сортировка
От Andres Freund
Тема Re: Should we back-patch SSL renegotiation fixes?
Дата
Msg-id 20150624160151.GX4797@alap3.anarazel.de
обсуждение исходный текст
Ответ на Re: Should we back-patch SSL renegotiation fixes?  (Peter Eisentraut <peter_e@gmx.net>)
Ответы Re: Should we back-patch SSL renegotiation fixes?
Список pgsql-hackers
On 2015-06-24 11:57:53 -0400, Peter Eisentraut wrote:
> On 6/23/15 2:33 PM, Tom Lane wrote:
> > I do not know at this point whether these behaviors are really the same
> > bug or not, but I wonder whether it's time to consider back-patching the
> > renegotiation fixes we did in 9.4.
> 
> If Red Hat fixes their bug, then PostgreSQL doesn't have any actual
> problem anymore, does it?

It does, there are numerous bugs around renegotiation that exist with
upstream openssl and postgres. More in the older branches, but even in
HEAD we break regularly. Most only occur in replication connections (due
to copy both) and/or when using more complex clients where clients and
servers send data at the same time due to pipelining.

Greetings,

Andres Freund



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Re: Should we back-patch SSL renegotiation fixes?
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Should we back-patch SSL renegotiation fixes?