Re: Retire support for OpenSSL 1.1.1 due to raised API requirements
От | Daniel Gustafsson |
---|---|
Тема | Re: Retire support for OpenSSL 1.1.1 due to raised API requirements |
Дата | |
Msg-id | 6C3D2F05-39AD-4B15-BF56-14B5B0749811@yesql.se обсуждение исходный текст |
Ответ на | Re: Retire support for OpenSSL 1.1.1 due to raised API requirements (Tom Lane <tgl@sss.pgh.pa.us>) |
Ответы |
Re: Retire support for OpenSSL 1.1.1 due to raised API requirements
|
Список | pgsql-hackers |
> On 10 Sep 2024, at 00:53, Michael Paquier <michael@paquier.xyz> wrote: > > On Mon, Sep 09, 2024 at 11:29:09PM +0200, Daniel Gustafsson wrote: >> Agreed. OpenSSL 1.1.1 is very different story and I suspect we'll be stuck on >> that level for some time, but 1.1.0 is gone from production use. > > The cleanup induced by the removal of 1.1.0 is minimal. I'm on board > about your argument with SSL_CTX_set_ciphersuites() to drop 1.1.0 and > simplify the other feature. Yeah, the change to existing code is trivial but avoiding adding a kluge to handle versions without the relevant API will save complexity. Thanks for review. This change will be committed together with the TLSv1.3 cipher suite pathcset, just wanted to bring it up here and not hide it in another thread. -- Daniel Gustafsson
В списке pgsql-hackers по дате отправления: