Skip site navigation (1) Skip section navigation (2)

Re: OpenSSL Applink

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Dave Page <dpage(at)postgresql(dot)org>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-patches(at)postgresql(dot)org
Subject: Re: OpenSSL Applink
Date: 2007-09-28 15:20:57
Message-ID: 46FD1BD9.4070202@dunslane.net (view raw or flat)
Thread:
Lists: pgsql-patches

Dave Page wrote:
> Andrew Dunstan wrote:
>>
>>
>> Dave Page wrote:
>>>
>>> I believe we just didn't notice it until now because the older Mingw 
>>> builds use the MSVC 6.0 runtimes which just happened to be 
>>> compatible with the OpenSSL binary builds (we're now using 8.0), in 
>>> addition to which there are relatively few people using client-side 
>>> certs I'd wager.
>>>
>>>
>>
>> So SSL works without this wart if you don't have a client cert?
>
> Yep.
>
>

Then I think I'd rather disable use of client certs for the offending 
openssl versions in libpq, or let the apps die and refer the customers 
to the openssl people to lobby them for a sane solution.

cheers

andrew



In response to

Responses

pgsql-patches by date

Next:From: Dave PageDate: 2007-09-28 15:24:55
Subject: Re: OpenSSL Applink
Previous:From: Dave PageDate: 2007-09-28 15:15:26
Subject: Re: OpenSSL Applink

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group