Grab bag of smaller OpenSSL fixups

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: pgsql-hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Grab bag of smaller OpenSSL fixups
Date: 2026-07-13 14:16:39
Message-ID: 68B9881D-DAA8-467D-A251-C96E98E57BA0@yesql.se
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

I've been collecting a few small fixups to the OpenSSL code and figured it was
time to send them over to keep the number of fixes more manageable.

* 0001: Remove the use of static variable to not interfere with the future
multithreading efforts
* 0002: Replace SSLv23_method with TLS_method, it has been an alias to the new
name since 2015 in OpenSSL
* 0003: Replace deprecated API X509_NAME_get_text_by_NID with the recommended
alternative X509_NAME_get_index_by_NID + X509_NAME_get_entry. The API was
deprecated in OpenSSL 4 and risk getting removed, with the alternatives being
available in all supported versions.
* 0004: Fix TLS protocol detection. We have been using the wrong macro for
feature test for a long time, replace with the actual feature test macro.
(There is no protocol downgrade here, it will error out when misconfiguring).

None of these change existing functionality or introduce new functionality.

--
Daniel Gustafsson

Attachment Content-Type Size
0004-ssl-Use-the-correct-feature-macros-for-TLS-protocol-.patch application/octet-stream 2.8 KB
0003-ssl-Replace-deprecated-API-to-get-commonName.patch application/octet-stream 2.5 KB
0002-ssl-Use-TLS_method-instead-of-deprecated-SSLv23_meth.patch application/octet-stream 2.3 KB
0001-ssl-Remove-static-var-tracking-tls_init_hook-warning.patch application/octet-stream 3.2 KB

Browse pgsql-hackers by date

  From Date Subject
Next Message Henson Choi 2026-07-13 14:34:32 Re: Row pattern recognition
Previous Message Henson Choi 2026-07-13 13:55:05 Re: Row pattern recognition