Re: pgsql: Use OpenSSL EVP API for symmetric encryption in pgcrypto. - Mailing list pgsql-committers

From Heikki Linnakangas
Subject Re: pgsql: Use OpenSSL EVP API for symmetric encryption in pgcrypto.
Date
Msg-id 6207afd5-caa5-9444-c143-e2643a66afef@iki.fi
Whole thread Raw
In response to Re: pgsql: Use OpenSSL EVP API for symmetric encryption in pgcrypto.  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: pgsql: Use OpenSSL EVP API for symmetric encryption in pgcrypto.
List pgsql-committers
On 10/18/2016 12:28 AM, Tom Lane wrote:
> Heikki Linnakangas <heikki.linnakangas@iki.fi> writes:
>> Use OpenSSL EVP API for symmetric encryption in pgcrypto.
>
> BTW, "narwhal" seems to have a problem with this.
> Not very clear what, maybe an incompatibility with old openssl versions?

Dave, what version of OpenSSL are 'narwhal' and 'baiji' using? I've
tried to reproduce this on my laptop, by compiling different versions of
OpenSSL, between 0.9.8beta1 and 0.9.8 head, but without success..

Googling for the failed test vector, I found this:

https://www.mail-archive.com/openssl-users@openssl.org/msg68108.html

It looks like the same issue, given the symptoms, but AFAICS the
pgcrypto code is correctly calling EVP_EncryptInit_ex() twice.

- Heikki



pgsql-committers by date:

Previous
From: Michael Paquier
Date:
Subject: Re: pgsql: Use OpenSSL EVP API for symmetric encryption in pgcrypto.
Next
From: Dave Page
Date:
Subject: Re: pgsql: Use OpenSSL EVP API for symmetric encryption in pgcrypto.