Re: Cutting support for OpenSSL 1.0.1 and 1.0.2 in 17~? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Cutting support for OpenSSL 1.0.1 and 1.0.2 in 17~?
Date
Msg-id 103258.1712158175@sss.pgh.pa.us
Whole thread Raw
In response to Re: Cutting support for OpenSSL 1.0.1 and 1.0.2 in 17~?  (Jacob Champion <jacob.champion@enterprisedb.com>)
Responses Re: Cutting support for OpenSSL 1.0.1 and 1.0.2 in 17~?
Re: Cutting support for OpenSSL 1.0.1 and 1.0.2 in 17~?
List pgsql-hackers
Jacob Champion <jacob.champion@enterprisedb.com> writes:
> As far as I can tell, no versions of LibreSSL so far provide
> X509_get_signature_info(), so this patch is probably a bit too
> aggressive.

Another problem with cutting support is how many buildfarm members
will we lose.  I scraped recent configure logs and got the attached
results.  I count 3 machines running 1.0.1, 18 running some flavor
of 1.0.2, and 7 running various LibreSSL versions.  We could
probably retire or update the 1.0.1 installations, but the rest
would represent a heavier lift.  Notably, it seems that what macOS
is shipping is LibreSSL.

            regards, tom lane

    sysname    |                                              l
---------------+----------------------------------------------------------------------------------------------
 alabio        | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 alimoche      | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022
 arowana       | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 avocet        | configure: using openssl: OpenSSL 1.1.1l-fips  24 Aug 2021 SUSE release 150400.7.60.2
 ayu           | configure: using openssl: OpenSSL 1.1.0l  10 Sep 2019
 babbler       | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
 basilisk      | configure: using openssl: OpenSSL 3.1.4 24 Oct 2023 (Library: OpenSSL 3.1.4 24 Oct 2023)
 batfish       | configure: using openssl: OpenSSL 1.0.2g  1 Mar 2016
 batta         | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 blackneck     | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022
 boa           | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 boomslang     | configure: using openssl: OpenSSL 1.1.1k  25 Mar 2021
 broadbill     | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
 bulbul        | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
 buri          | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 bushmaster    | configure: using openssl: OpenSSL 3.1.5 30 Jan 2024 (Library: OpenSSL 3.1.5 30 Jan 2024)
 butterflyfish | configure: using openssl: OpenSSL 1.0.2p-fips  14 Aug 2018
 caiman        | configure: using openssl: OpenSSL 3.2.1 30 Jan 2024 (Library: OpenSSL 3.2.1 30 Jan 2024)
 canebrake     | configure: using openssl: OpenSSL 3.1.5 30 Jan 2024 (Library: OpenSSL 3.1.5 30 Jan 2024)
 cascabel      | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022 (Library: OpenSSL 1.1.1w  11 Sep 2023)
 cavefish      | configure: using openssl: OpenSSL 1.1.1  11 Sep 2018
 chevrotain    | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022 (Library: OpenSSL 1.1.1w  11 Sep 2023)
 chimaera      | configure: using openssl: OpenSSL 1.1.0l  10 Sep 2019
 chipmunk      | configure: using openssl: OpenSSL 1.0.1t  3 May 2016
 cisticola     | configure: using openssl: OpenSSL 1.1.1g FIPS  21 Apr 2020
 clam          | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 conchuela     | configure: using openssl: LibreSSL 3.2.5
 copperhead    | configure: using openssl: OpenSSL 1.1.1k  25 Mar 2021
 culpeo        | configure: using openssl: OpenSSL 3.0.11 19 Sep 2023 (Library: OpenSSL 3.0.11 19 Sep 2023)
 cuon          | configure: using openssl: OpenSSL 1.0.2g  1 Mar 2016
 demoiselle    | configure: using openssl: OpenSSL 1.1.0h-fips  27 Mar 2018
 desman        | configure: using openssl: OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
 dhole         | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 dikkop        | configure: using openssl: OpenSSL 3.0.10 1 Aug 2023 (Library: OpenSSL 3.0.10 1 Aug 2023)
 elasmobranch  | configure: using openssl: OpenSSL 1.1.0h-fips  27 Mar 2018
 gokiburi      | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 grison        | configure: using openssl: OpenSSL 1.1.0l  10 Sep 2019
 grison        | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022
 guaibasaurus  | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 gull          | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 habu          | configure: using openssl: OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
 hachi         | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 hake          | configure: using openssl: OpenSSL 1.0.2u  20 Dec 2019
 hippopotamus  | configure: using openssl: OpenSSL 1.1.1l-fips  24 Aug 2021 SUSE release 150400.7.60.2
 indri         | configure: using openssl: OpenSSL 3.2.0 23 Nov 2023 (Library: OpenSSL 3.2.0 23 Nov 2023)
 jackdaw       | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022 (Library: OpenSSL 1.1.1w  11 Sep 2023)
 jay           | configure: using openssl: OpenSSL 1.1.1l-fips  24 Aug 2021 SUSE release 150400.7.60.2
 kingsnake     | configure: using openssl: OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
 krait         | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
 lancehead     | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
 lapwing       | configure: using openssl: OpenSSL 1.0.1t  3 May 2016
 loach         | configure: using openssl: OpenSSL 1.1.1q-freebsd  5 Jul 2022
 longfin       | configure: using openssl: LibreSSL 3.3.6
 lora          | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 lorikeet      | configure: using openssl: OpenSSL 3.0.12 24 Oct 2023 (Library: OpenSSL 3.0.12 24 Oct 2023)
 mamba         | configure: using openssl: OpenSSL 3.0.12 24 Oct 2023 (Library: OpenSSL 3.0.12 24 Oct 2023)
 mamushi       | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 mantid        | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 margay        | configure: using openssl: OpenSSL 1.0.2za  24 Aug 2021
 massasauga    | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 mereswine     | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 morepork      | configure: using openssl: LibreSSL 3.3.2
 motmot        | configure: using openssl: OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
 mule          | configure: using openssl: OpenSSL 3.0.11 19 Sep 2023 (Library: OpenSSL 3.0.11 19 Sep 2023)
 myna          | configure: using openssl: OpenSSL 1.0.2r-fips  26 Feb 2019
 nicator       | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 nuthatch      | configure: using openssl: OpenSSL 3.1.4 24 Oct 2023 (Library: OpenSSL 3.1.4 24 Oct 2023)
 opaleye       | configure: using openssl: OpenSSL 1.1.1o-freebsd  3 May 2022
 oystercatcher | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 parula        | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 perentie      | configure: using openssl: OpenSSL 3.1.1 30 May 2023 (Library: OpenSSL 3.1.1 30 May 2023)
 pike          | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022 (Library: OpenSSL 1.1.1w  11 Sep 2023)
 plover        | configure: using openssl: LibreSSL 3.3.2
 pollock       | configure: using openssl: OpenSSL 3.1.4 24 Oct 2023 (Library: OpenSSL 3.1.4 24 Oct 2023)
 potoo         | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 prion         | configure: using openssl: OpenSSL 3.0.8 7 Feb 2023 (Library: OpenSSL 3.0.8 7 Feb 2023)
 pytilia       | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
 rhinoceros    | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 rinkhals      | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022 (Library: OpenSSL 1.1.1w  11 Sep 2023)
 rudd          | configure: using openssl: OpenSSL 1.1.1f  31 Mar 2020
 ruddy         | configure: using openssl: OpenSSL 1.1.1d  10 Sep 2019
 sarus         | configure: using openssl: OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
 sawshark      | configure: using openssl: LibreSSL 3.8.2
 schnauzer     | configure: using openssl: LibreSSL 3.7.2
 shelduck      | configure: using openssl: OpenSSL 1.0.2p-fips  14 Aug 2018
 shiner        | configure: using openssl: OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
 sidewinder    | configure: using openssl: OpenSSL 1.1.1k  25 Mar 2021
 sifaka        | configure: using openssl: LibreSSL 3.3.6
 siskin        | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 snakefly      | configure: using openssl: OpenSSL 1.0.2k-fips  26 Jan 2017
 splitfin      | configure: using openssl: OpenSSL 1.1.1f  31 Mar 2020
 taipan        | configure: using openssl: OpenSSL 3.1.5 30 Jan 2024 (Library: OpenSSL 3.1.5 30 Jan 2024)
 tayra         | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 topminnow     | configure: using openssl: OpenSSL 1.0.1t  3 May 2016
 trilobite     | configure: using openssl: OpenSSL 1.1.1l-fips  24 Aug 2021 SUSE release 150400.7.60.2
 turaco        | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 turbot        | configure: using openssl: OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
 twinspot      | configure: using openssl: OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
 urocryon      | configure: using openssl: OpenSSL 1.1.0l  10 Sep 2019
 urutu         | configure: using openssl: OpenSSL 3.1.5 30 Jan 2024 (Library: OpenSSL 3.1.5 30 Jan 2024)
 vimba         | configure: using openssl: OpenSSL 1.1.1  11 Sep 2018
 whinchat      | configure: using openssl: OpenSSL 1.1.1n  15 Mar 2022 (Library: OpenSSL 1.1.1w  11 Sep 2023)
 widowbird     | configure: using openssl: OpenSSL 1.1.1w  11 Sep 2023
 ziege         | configure: using openssl: OpenSSL 1.1.1k  FIPS 25 Mar 2021
(104 rows)

    sysname    |                       l                        
---------------+------------------------------------------------
 adder         | Run-time dependency openssl found: YES 3.1.5
 akepa         | Run-time dependency openssl found: YES 3.1.1
 calliphoridae | Run-time dependency openssl found: YES 3.1.5
 crake         | Run-time dependency openssl found: YES 3.1.1
 culicidae     | Run-time dependency openssl found: YES 3.1.5
 dogfish       | Run-time dependency openssl found: YES 3.1.4
 fairywren     | Run-time dependency openssl found: YES 3.1.0\r
 flaviventris  | Run-time dependency openssl found: YES 3.1.5
 francolin     | Run-time dependency openssl found: YES 3.1.5
 grassquit     | Run-time dependency openssl found: YES 3.1.5
 kestrel       | Run-time dependency openssl found: YES 3.1.5
 koel          | Run-time dependency openssl found: YES 3.1.1
 mylodon       | Run-time dependency openssl found: YES 3.1.5
 olingo        | Run-time dependency openssl found: YES 3.1.5
 piculet       | Run-time dependency openssl found: YES 3.1.5
 rorqual       | Run-time dependency openssl found: YES 3.1.5
 serinus       | Run-time dependency openssl found: YES 3.1.5
 sevengill     | Run-time dependency openssl found: YES 3.2.1
 skink         | Run-time dependency openssl found: YES 3.1.5
 tamandua      | Run-time dependency openssl found: YES 3.1.5
(20 rows)


pgsql-hackers by date:

Previous
From: "Tristan Partin"
Date:
Subject: Re: psql not responding to SIGINT upon db reconnection
Next
From: Panda Developpeur
Date:
Subject: Re: [PATCH] Modify pg_ctl to detect presence of geek user