"Marko Kreen" <markokr@gmail.com> writes:
> solaris openssl refuses to handle keys longer than 128bits.
> ...
> So something like the current patch should be still applied
> as a near-term fix.
Applied to HEAD and 8.2. I wasn't sure if there was interest in
patching further back, or if the patch was meant to work further back.
Let me know if you're not happy.
> But I'm starting to think that the blowfish
> check should be #ifdef __solaris__ only. Has anyone good reasons
> why it should apply to everyone?
As long as we've got to have the code, we may as well use it --- it's
possible that Sun isn't the only vendor who got worried about the crypto
export laws. Your caching of the result should be enough to ensure that
the overhead is negligible.
regards, tom lane