| From: | Daniel Gustafsson <daniel(at)yesql(dot)se> |
|---|---|
| To: | pgsql-hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org> |
| Subject: | Grab bag of smaller OpenSSL fixups |
| Date: | 2026-07-13 14:16:39 |
| Message-ID: | 68B9881D-DAA8-467D-A251-C96E98E57BA0@yesql.se |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
I've been collecting a few small fixups to the OpenSSL code and figured it was
time to send them over to keep the number of fixes more manageable.
* 0001: Remove the use of static variable to not interfere with the future
multithreading efforts
* 0002: Replace SSLv23_method with TLS_method, it has been an alias to the new
name since 2015 in OpenSSL
* 0003: Replace deprecated API X509_NAME_get_text_by_NID with the recommended
alternative X509_NAME_get_index_by_NID + X509_NAME_get_entry. The API was
deprecated in OpenSSL 4 and risk getting removed, with the alternatives being
available in all supported versions.
* 0004: Fix TLS protocol detection. We have been using the wrong macro for
feature test for a long time, replace with the actual feature test macro.
(There is no protocol downgrade here, it will error out when misconfiguring).
None of these change existing functionality or introduce new functionality.
--
Daniel Gustafsson
| Attachment | Content-Type | Size |
|---|---|---|
| 0004-ssl-Use-the-correct-feature-macros-for-TLS-protocol-.patch | application/octet-stream | 2.8 KB |
| 0003-ssl-Replace-deprecated-API-to-get-commonName.patch | application/octet-stream | 2.5 KB |
| 0002-ssl-Use-TLS_method-instead-of-deprecated-SSLv23_meth.patch | application/octet-stream | 2.3 KB |
| 0001-ssl-Remove-static-var-tracking-tls_init_hook-warning.patch | application/octet-stream | 3.2 KB |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Henson Choi | 2026-07-13 14:34:32 | Re: Row pattern recognition |
| Previous Message | Henson Choi | 2026-07-13 13:55:05 | Re: Row pattern recognition |