]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Disable OpenSSL EVP digest padding in pgcrypto
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Sat, 25 Sep 2021 09:27:20 +0000 (11:27 +0200)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Sat, 25 Sep 2021 09:27:20 +0000 (11:27 +0200)
commit00c72da4a22d9883b1e511ff140bd47cc75d536d
tree834f5d8de659b15e2b8dbadcf1ef0b93fda95fcd
parent90cfd269f226ecf287df7b8df04f6a46515000d4
Disable OpenSSL EVP digest padding in pgcrypto

The PX layer in pgcrypto is handling digest padding on its own uniformly
for all backend implementations. Starting with OpenSSL 3.0.0, DecryptUpdate
doesn't flush the last block in case padding is enabled so explicitly
disable it as we don't use it.

This will be backpatched to all supported version once there is sufficient
testing in the buildfarm of OpenSSL 3.

Reviewed-by: Peter Eisentraut, Michael Paquier
Discussion: https://postgr.es/m/FEF81714-D479-4512-839B-C769D2605F8A@yesql.se
Backpatch-through: 9.6
contrib/pgcrypto/openssl.c