About BoringSSL, an OpenSSL fork

From: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>
To: PostgreSQL mailing lists <pgsql-hackers(at)postgresql(dot)org>
Subject: About BoringSSL, an OpenSSL fork
Date: 2015-10-26 00:59:00
Message-ID: CAB7nPqTDzQEBO-dVr6L1AH+nU=ADBBokeGGTuW+FJ_jCP3MazA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi all,

Perhaps some of you guys knew about that, but I just found about this
stuff this morning:
https://boringssl.googlesource.com/boringssl/+/HEAD/PORTING.md
Looking at the porting section many routines have changed compared to
OpenSSL. I can't imagine this fork to become a complete replacement of
OpenSSL, but it may be worth considering an integration in Postgres
code depending on the features it will have (Curve25519,
Ed25519 mentioned). Also since 9.4 the SSL code paths have been
rearranged to allow more implementations to be done with other SSL
libraries.

Note that I am wondering also about the long-term stability and
potential backward-incompatibilities of the routines in this fork
though (recall for example v8 major breakage wround 3.14, if I recall
correctly this version number).
Thoughts?
--
Michael

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Kouhei Kaigai 2015-10-26 01:23:46 Re: [DESIGN] ParallelAppend
Previous Message Tatsuo Ishii 2015-10-26 00:54:03 Re: Re: [BUGS] BUG #13611: test_postmaster_connection failed (Windows, listen_addresses = '0.0.0.0' or '::')