On 14/10/2020 06:29, Michael Paquier wrote:
With 0001 in place, switching the SHA2 implementation of OpenSSL to use EVP is straight-forward, as the only thing that's actually needed here is to put in place a callback to clean up the EVP contexts allocated by OpenSSL. This is rather similar to what we do in pgcrypto in some ways, but that's actually simpler and I made things so as we only track down the EVP_MD_CTX members to free on abort.
Since this is going to be core backend code (and also frontend), we don't need to use the generic reource owner callback mechanism, we could add a built-in ResourceOwnerData field and functions in resowner.c. The callback mechanism is a bit clunky.
- Heikki