From eb643536b9f16d58e17f21a226dd63be61e44011 Mon Sep 17 00:00:00 2001 From: Daniel Gustafsson Date: Sat, 25 Sep 2021 11:27:28 +0200 Subject: Add alternative output for OpenSSL 3 without legacy loaded OpenSSL 3 introduced the concept of providers to support modularization, and moved the outdated ciphers to the new legacy provider. In case it's not loaded in the users openssl.cnf file there will be a lot of regress test failures, so add alternative outputs covering those. Also document the need to load the legacy provider in order to use older ciphers with OpenSSL-enabled pgcrypto. This will be backpatched to all supported version once there is sufficient testing in the buildfarm of OpenSSL 3. Reviewed-by: Michael Paquier Discussion: https://postgr.es/m/FEF81714-D479-4512-839B-C769D2605F8A@yesql.se Backpatch-through: 9.6 --- doc/src/sgml/pgcrypto.sgml | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'doc/src') diff --git a/doc/src/sgml/pgcrypto.sgml b/doc/src/sgml/pgcrypto.sgml index b4cd8ebc197..8435b331cfe 100644 --- a/doc/src/sgml/pgcrypto.sgml +++ b/doc/src/sgml/pgcrypto.sgml @@ -1225,6 +1225,13 @@ gen_random_uuid() returns uuid + + When compiled against OpenSSL 3.0.0 and later + versions, the legacy provider must be activated in the + openssl.cnf configuration file in order to use older + ciphers like DES or Blowfish. + + Notes: -- cgit v1.2.3