diff options
| author | Daniel Gustafsson | 2024-10-24 13:20:19 +0000 |
|---|---|---|
| committer | Daniel Gustafsson | 2024-10-24 13:20:19 +0000 |
| commit | 6c66b7443cebf3ff09ea76416a20fb6bb1d32a52 (patch) | |
| tree | 3133dc783cd351b714a7484284014058d2d2b63d /doc/src | |
| parent | f81855171f95c4440d1d9f41bc9e5ac47eafb7a0 (diff) | |
Raise the minimum supported OpenSSL version to 1.1.1
Commit a70e01d4306fdbcd retired support for OpenSSL 1.0.2 in order to get
rid of the need for manual initialization of the library. This left our
API usage compatible with 1.1.0 which was defined as the minimum required
version. Also mention that 3.4 is the minimum version required when using
LibreSSL.
An upcoming commit will introduce support for configuring TLSv1.3 cipher
suites which require an API call in OpenSSL 1.1.1 and onwards. In order
to support this setting this commit will set v1.1.1 as the new minimum
required version. The version-specific call for randomness init added
in commit c3333dbc0c0 is removed as it's no longer needed.
Author: Daniel Gustafsson <[email protected]>
Discussion: https://postgr.es/m/[email protected]
Discussion: https://postgr.es/m/[email protected]
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/installation.sgml | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/doc/src/sgml/installation.sgml b/doc/src/sgml/installation.sgml index 3a491b59896..8449c20f798 100644 --- a/doc/src/sgml/installation.sgml +++ b/doc/src/sgml/installation.sgml @@ -293,7 +293,13 @@ encrypted client connections. <productname>OpenSSL</productname> is also required for random number generation on platforms that do not have <filename>/dev/urandom</filename> (except Windows). The minimum - required version is 1.1.0. + required version is 1.1.1. + </para> + <para> + Additionally, <productname>LibreSSL</productname> is supported using the + <productname>OpenSSL</productname> compatibility layer. The minimum + required version is 3.4 (from <systemitem class="osname">OpenBSD</systemitem> + version 7.0). </para> </listitem> @@ -989,7 +995,9 @@ build-postgresql: <para> Build with support for <acronym>SSL</acronym> (encrypted) connections. The only <replaceable>LIBRARY</replaceable> - supported is <option>openssl</option>. This requires the + supported is <option>openssl</option>, which is used for both + <productname>OpenSSL</productname> + and <productname>LibreSSL</productname>. This requires the <productname>OpenSSL</productname> package to be installed. <filename>configure</filename> will check for the required header files and libraries to make sure that your |