Re: [PATCH] add ssl_protocols configuration option

From: Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>
To: Dag-Erling Smørgrav <des(at)des(dot)no>
Cc: Martijn van Oosterhout <kleptog(at)svana(dot)org>, Magnus Hagander <magnus(at)hagander(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [PATCH] add ssl_protocols configuration option
Date: 2014-10-23 23:55:46
Message-ID: 20141023235546.GK1791@alvin.alvh.no-ip.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Dag-Erling Smørgrav wrote:
> Alvaro Herrera <alvherre(at)2ndquadrant(dot)com> writes:
> > OpenSSL just announced a week or two ago that they're abandoning support
> > for 0.9.8 by the end of next year[1], which means its replacements have
> > been around for a really long time.
>
> RHEL5 still has 0.9.8e with backported patches and will be supported
> until 2017-03-31.
>
> FreeBSD 8.4, 9.1, 9.2 and 9.3 all have 0.9.8y with backported patches.
> 8.4, 9.1 and 9.2 all expire before OpenSSL 0.9.8, but 9.3 will be
> supported until 2016-12-31.
>
> 0.9.8 and 1.0.1 are not binary compatible, so upgrading is *not* an
> option. We (as in FreeBSD) will have to make do - either develop our
> own patches or adapt RedHat's.

I think you misread me. I was saying to desupport 0.9.7, not 0.9.8.

--
Álvaro Herrera http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Geoghegan 2014-10-24 01:43:15 Re: INSERT ... ON CONFLICT {UPDATE | IGNORE}
Previous Message Alvaro Herrera 2014-10-23 23:55:29 Re: KEY UPDATE / UPDATE / NO KEY UPDATE distinction vs. README.tuplock