Re: OpenSSL Applink - Mailing list pgsql-patches

From Andrew Dunstan
Subject Re: OpenSSL Applink
Date
Msg-id 46FD1BD9.4070202@dunslane.net
Whole thread Raw
In response to Re: OpenSSL Applink  (Dave Page <dpage@postgresql.org>)
Responses Re: OpenSSL Applink  (Dave Page <dpage@postgresql.org>)
List pgsql-patches

Dave Page wrote:
> Andrew Dunstan wrote:
>>
>>
>> Dave Page wrote:
>>>
>>> I believe we just didn't notice it until now because the older Mingw
>>> builds use the MSVC 6.0 runtimes which just happened to be
>>> compatible with the OpenSSL binary builds (we're now using 8.0), in
>>> addition to which there are relatively few people using client-side
>>> certs I'd wager.
>>>
>>>
>>
>> So SSL works without this wart if you don't have a client cert?
>
> Yep.
>
>

Then I think I'd rather disable use of client certs for the offending
openssl versions in libpq, or let the apps die and refer the customers
to the openssl people to lobby them for a sane solution.

cheers

andrew



pgsql-patches by date:

Previous
From: Dave Page
Date:
Subject: Re: OpenSSL Applink
Next
From: Dave Page
Date:
Subject: Re: OpenSSL Applink