Re: remove internal support in pgcrypto?

From: Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: remove internal support in pgcrypto?
Date: 2021-11-03 15:06:34
Message-ID: 146fe524-646a-c335-7c7f-6025bedc25fc@enterprisedb.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 03.11.21 11:16, Daniel Gustafsson wrote:
>> On 30 Oct 2021, at 14:11, Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com> wrote:
>>
>> On 24.08.21 11:13, Peter Eisentraut wrote:
>>> So I'm tempted to suggest that we remove the built-in, non-OpenSSL cipher and hash implementations in pgcrypto (basically INT_SRCS in pgcrypto/Makefile), and then also pursue the simplifications in the OpenSSL code paths described in [0].
>>
>> Here is a patch for this.
>
> This patch doesn't work on Windows, which I think is because it pulls in
> pgcrypto even in builds without OpenSSL. Poking at that led me to realize that
> we can simplify even more with this. The conditonal source includes can go
> away and be replaced with a simple OBJS clause, and with that the special hacks
> in Mkvcbuild.pm to overcome that.
>
> Attached is a diff on top of your patch to do the above. I haven't tested it
> on Windows yet, but if you think it's in the right direction we'll take it for
> a spin in a CI with/without OpenSSL.

Here is a consolidated patch. I have tested it locally, so it should be
okay on Windows.

> Now, *if* we merge the NSS patch this does introduce special cases again which
> this rips out. I prefer to try and fix them in that patch to keep avoiding the
> need for them rather than keep them on speculation for a patch which hasn't
> been decided on.

Okay, I wasn't sure about the preferred way forward here. I'm content
with the approach you have chosen.

Attachment Content-Type Size
v2-0001-Remove-non-OpenSSL-support-from-pgcrypto.patch text/plain 220.5 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2021-11-03 15:14:35 Re: Parallelize correlated subqueries that execute within each worker
Previous Message Geoff Winkless 2021-11-03 14:54:12 Re: Should we support new definition for Identity column : GENERATED BY DEFAULT ON NULL?