]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Disable OpenSSL EVP digest padding in pgcrypto
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Sat, 25 Sep 2021 09:27:20 +0000 (11:27 +0200)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Sat, 25 Sep 2021 09:27:20 +0000 (11:27 +0200)
commit11901cd9628bf4e3b26d9aba21e6287f2cde3a8a
treecc7ea56bf522779dd031a3e9423de778b49295ad
parent0f28d267c7e0936b55307d88644070248a718bd7
Disable OpenSSL EVP digest padding in pgcrypto

The PX layer in pgcrypto is handling digest padding on its own uniformly
for all backend implementations. Starting with OpenSSL 3.0.0, DecryptUpdate
doesn't flush the last block in case padding is enabled so explicitly
disable it as we don't use it.

This will be backpatched to all supported version once there is sufficient
testing in the buildfarm of OpenSSL 3.

Reviewed-by: Peter Eisentraut, Michael Paquier
Discussion: https://postgr.es/m/FEF81714-D479-4512-839B-C769D2605F8A@yesql.se
Backpatch-through: 9.6
contrib/pgcrypto/openssl.c