]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Add alternative output for OpenSSL 3 without legacy loaded
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Sat, 25 Sep 2021 09:27:28 +0000 (11:27 +0200)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Sat, 25 Sep 2021 09:27:28 +0000 (11:27 +0200)
commit19e91a40bf26530788d1dae39fa3e7e5a52ca7b2
tree79ef0449dd25092f1a54c20cd8e6d0b07dfce65f
parent11901cd9628bf4e3b26d9aba21e6287f2cde3a8a
Add alternative output for OpenSSL 3 without legacy loaded

OpenSSL 3 introduced the concept of providers to support modularization,
and moved the outdated ciphers to the new legacy provider. In case it's
not loaded in the users openssl.cnf file there will be a lot of regress
test failures, so add alternative outputs covering those.

Also document the need to load the legacy provider in order to use older
ciphers with OpenSSL-enabled pgcrypto.

This will be backpatched to all supported version once there is sufficient
testing in the buildfarm of OpenSSL 3.

Reviewed-by: Michael Paquier
Discussion: https://postgr.es/m/FEF81714-D479-4512-839B-C769D2605F8A@yesql.se
Backpatch-through: 9.6
contrib/pgcrypto/expected/blowfish_1.out [new file with mode: 0644]
contrib/pgcrypto/expected/cast5_1.out [new file with mode: 0644]
contrib/pgcrypto/expected/des_1.out [new file with mode: 0644]
contrib/pgcrypto/expected/pgp-decrypt_2.out [new file with mode: 0644]
contrib/pgcrypto/expected/pgp-pubkey-decrypt_1.out [new file with mode: 0644]
doc/src/sgml/pgcrypto.sgml