Re: PostgreSQL and OpenSSL 4.0.0

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Michael Paquier <michael(at)paquier(dot)xyz>
Cc: PostgreSQL-development <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Re: PostgreSQL and OpenSSL 4.0.0
Date: 2026-05-07 13:44:45
Message-ID: 65C5DC15-DE27-4D36-8AEE-A854C23B3834@yesql.se
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On 17 Apr 2026, at 23:50, Michael Paquier <michael(at)paquier(dot)xyz> wrote:
>
> On Thu, Apr 16, 2026 at 03:32:54PM +0200, Daniel Gustafsson wrote:
>> The attached patch, while not pretty, allows libpq and sslinfo to build without
>> warnings on OpenSSL 1.1.1 through 4.0.0 as well as on LibreSSL (and there is
>> quite some variability in constness across all these API versions).
>
> Thanks for that. That is super fast.
>
> This is likely going to require a backpatch at some point, right?
> What's the impact of the blast in branches where we need to support
> OpenSSL down to 1.0.1, which is the minimum version in REL_14_STABLE?

Indeed, we probably want to backpatch this at some point since OpenSSL 4 is
equally likely to be used regardless of which branch users compile. Whether we
want to apply this already before 19 goes beta I'll leave for the RMT to
decide.

For 14 through master the attached compiles without warnings and tests green on
all the supported versions of OpenSSL and LibreSSL. That being said, I'm not
sure that we want to go all the way to 14 since if something does break, we
can't really go around fixing it - I think amending the docs in 14 stating that
OpenSSL 3.6 is the highest supported version is a better solution.

--
Daniel Gustafsson

Attachment Content-Type Size
vmaster--18-0001-Support-OpenSSL-4.patch application/octet-stream 8.9 KB
vREL_17--REL_16-0001-Support-OpenSSL-4.patch application/octet-stream 10.9 KB
vREL_15-0001-Support-OpenSSL-4.patch application/octet-stream 9.9 KB
vREL_14-0001-Support-OpenSSL-4.patch application/octet-stream 10.0 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2026-05-07 13:59:31 Re: Broken build on macOS (Universal / Intel): cpuid instruction not available
Previous Message Andrew Dunstan 2026-05-07 13:35:29 Re: Postgresql 18 Linux (all flavors) - with installation, create new instance/main database