PQinitSSL broken in some use cases - Mailing list pgsql-hackers

From Andrew Chernow
Subject PQinitSSL broken in some use cases
Date
Msg-id 49820D7D.7030902@esilo.com
Whole thread Raw
Responses Re: PQinitSSL broken in some use casesf  (Bruce Momjian <bruce@momjian.us>)
List pgsql-hackers
I am using a library that links with and initializes libcrypto (ie. 
CRYPTO_set_locking_callback) but not SSL.  This causes problems even 
when using PQinitSSL(FALSE) because things like SSL_library_init(); are 
not called (unless I manually call them, copy and paste code from 
fe-secure.c which may change).  If libpq does init ssl, it overwrites 
(and breaks) the other library's crypto.

Shouldn't crypto and ssl init be treated as two different things?  If 
not, how does one determine a version portable way of initializing SSL 
in a manner required by libpq?  Lots of apps using encryption but don't 
necessarily use ssl, so they need to know how to init ssl for libpq.

-- 
Andrew Chernow
eSilo, LLC
every bit counts
http://www.esilo.com/


pgsql-hackers by date:

Previous
From: Sushant Sinha
Date:
Subject: Re: possible bug in cover density ranking?
Next
From: David E. Wheeler
Date:
Subject: Should IS DISTINCT FROM work with ANY()?