From: | Michael Paquier <michael(dot)paquier(at)gmail(dot)com> |
---|---|
To: | Heikki Linnakangas <hlinnaka(at)iki(dot)fi> |
Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>, Andreas Karlsson <andreas(at)proxel(dot)se>, Victor Wagner <vitus(at)wagner(dot)pp(dot)ru>, PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>, Christoph Berg <myon(at)debian(dot)org> |
Subject: | Re: OpenSSL 1.1 breaks configure and more |
Date: | 2016-08-27 14:07:12 |
Message-ID: | CAB7nPqSJ9j8Mj+P07U2wBWHTock4gVbpvXBSJvmQu-EPw26H5g@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Sat, Aug 27, 2016 at 2:04 AM, Heikki Linnakangas <hlinnaka(at)iki(dot)fi> wrote:
> On 08/26/2016 07:44 PM, Tom Lane wrote:
>> Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com> writes:
>> Also, I get this on fully-up-to-date OS X (El Capitan):
>>
>> $ openssl version
>> OpenSSL 0.9.8zh 14 Jan 2016
>
>
> Ok, sold, let's remove support for OpenSSL < 0.9.8.
Yes I think it's a wiser plan to not brush up newer versions than that.
>> Worth noting though is that without -Wno-deprecated-declarations, you
>> find that Apple has sprinkled the entire OpenSSL API with deprecation
>> warnings. That suggests that their plan for the future is to drop it
>> rather than update it. Should we be thinking ahead to that?
>
>
> Yeah, they want people to move to their own SSL library [1]. I doubt they
> will actually remove it any time soon, but who knows. It would be a good
> project for someone with an OS X system and some spare time, to write a
> patch to build with OS X's native SSL library instead of OpenSSL. The code
> is structured nicely to enable that now.
>
> [1] I couldn't find any official statement, but lots of blog posts saying
> the same thing.
As well on El Capitan:
$ ssh -V
OpenSSH_6.9p1, LibreSSL 2.1.8
So could it be possible that it would be a switch from openssl to
libressl instead?
--
Michael
From | Date | Subject | |
---|---|---|---|
Next Message | Peter Eisentraut | 2016-08-27 14:15:26 | Re: OpenSSL 1.1 breaks configure and more |
Previous Message | Michael Paquier | 2016-08-27 13:24:11 | Re: Missing checks when malloc returns NULL... |