Re: Fwd: PostgreSQL: WolfSSL support

2020-06-29 Thread Stephen Frost
Greetings, * Christoph Berg (m...@debian.org) wrote: > Re: Peter Eisentraut > > What would be the advantage of using wolfSSL over OpenSSL? > > Avoiding the OpenSSL-vs-GPL linkage problem with readline. I'd further say "folks are interested in an alternative to OpenSSL" as being a generally good

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-29 Thread Stephen Frost
Greetings, * Felix Lechner (felix.lech...@lease-up.com) wrote: > Attached please find a WIP patch for wolfSSL support in postgresql-12. Would really be best to have this off of HEAD if we're going to be looking at it rather than v12. We certainly aren't going to add new support for something new

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Felix Lechner
Hi Jonah, On Sat, Jun 27, 2020 at 12:35 PM Jonah H. Harris wrote: > > Somewhere, I recall seeing an open-source OpenSSL compatibility wrapper for > WolfSSL. Assuming that still exists, this patch seems entirely unnecessary. The patch uses the OpenSSL compatibility layer. Kind regards Felix Lec

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Felix Lechner
Hi Tom, On Sat, Jun 27, 2020 at 11:52 AM Tom Lane wrote: > > The configure > script could add -I/usr/include/wolfssl (or wherever those files > are) to CPPFLAGS instead of touching all those #includes. That does not work well when OpenSSL's development files are installed. I did not think a segm

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Felix Lechner
Hi Tom, On Sat, Jun 27, 2020 at 7:56 AM Tom Lane wrote: > > However, judging from the caveats mentioned in the initial message, > my inclination would be to wait awhile for wolfSSL to mature. Please have a closer look. The library has been around since 2004 and is popular in embedded systems. (I

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Michael Paquier
On Sun, Jun 28, 2020 at 10:18:12AM +0200, Peter Eisentraut wrote: > We have added support for allegedly-OpenSSL compatible libraries such as > LibreSSL before, so some tweaks for wolfSSL would seem acceptable. However, > I doubt we are going to backpatch them, so unless you want to take > responsib

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Tom Lane
Felix Lechner writes: > On Sat, Jun 27, 2020 at 7:56 AM Tom Lane wrote: >> However, judging from the caveats mentioned in the initial message, >> my inclination would be to wait awhile for wolfSSL to mature. > Please have a closer look. The library has been around since 2004 and > is popular in

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Bruce Momjian
On Sun, Jun 28, 2020 at 10:18:12AM +0200, Peter Eisentraut wrote: > On 2020-06-27 14:50, Christoph Berg wrote: > > Re: Peter Eisentraut > > > What would be the advantage of using wolfSSL over OpenSSL? > > > > Avoiding the OpenSSL-vs-GPL linkage problem with readline. > > We have added support for

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-28 Thread Peter Eisentraut
On 2020-06-27 14:50, Christoph Berg wrote: Re: Peter Eisentraut What would be the advantage of using wolfSSL over OpenSSL? Avoiding the OpenSSL-vs-GPL linkage problem with readline. We have added support for allegedly-OpenSSL compatible libraries such as LibreSSL before, so some tweaks for

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 05:46:17PM -0400, Tom Lane wrote: > Bruce Momjian writes: > > On Sat, Jun 27, 2020 at 06:25:21PM -0300, Ranier Vilela wrote: > >> Personally, the dynamic link does not hurt the GPL. > >> But some people, do not think so, it was also unclear what Mr Stallman > >> thinks > >

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Tom Lane
Bruce Momjian writes: > On Sat, Jun 27, 2020 at 06:25:21PM -0300, Ranier Vilela wrote: >> Personally, the dynamic link does not hurt the GPL. >> But some people, do not think so, it was also unclear what Mr Stallman thinks >> of the subject (dynamic link). > I think Stallman says the courts have

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Tom Lane
Christoph Berg writes: > Re: Ranier Vilela >> Isn't LIbreSSL a better alternative? > I don't know. It should work all right --- it's the default ssl library on OpenBSD and some other platforms, so we have some buildfarm coverage for it. (AFAICT, none of the OpenBSD machines are running the ssl t

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 06:25:21PM -0300, Ranier Vilela wrote: > Personally, the dynamic link does not hurt the GPL. > But some people, do not think so, it was also unclear what Mr Stallman thinks > of the subject (dynamic link). I think Stallman says the courts have to decide, which kind of makes

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Ranier Vilela
Em sáb., 27 de jun. de 2020 às 18:23, Bruce Momjian escreveu: > On Sat, Jun 27, 2020 at 06:14:21PM -0300, Ranier Vilela wrote: > > Em sáb., 27 de jun. de 2020 às 16:40, Bruce Momjian > > escreveu: > > > > On Sat, Jun 27, 2020 at 04:22:51PM -0300, Ranier Vilela wrote: > > > Em sáb., 27 de

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Jonah H. Harris
On Sat, Jun 27, 2020 at 3:37 PM Christoph Berg wrote: > Re: Jonah H. Harris > > Somewhere, I recall seeing an open-source OpenSSL compatibility wrapper > for > > WolfSSL. Assuming that still exists, this patch seems entirely > unnecessary. > > Unless you actually tried. Did you? It worked for m

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 06:14:21PM -0300, Ranier Vilela wrote: > Em sáb., 27 de jun. de 2020 às 16:40, Bruce Momjian > escreveu: > > On Sat, Jun 27, 2020 at 04:22:51PM -0300, Ranier Vilela wrote: > > Em sáb., 27 de jun. de 2020 às 09:50, Christoph Berg > > escreveu: > > > > 

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Ranier Vilela
Em sáb., 27 de jun. de 2020 às 16:40, Bruce Momjian escreveu: > On Sat, Jun 27, 2020 at 04:22:51PM -0300, Ranier Vilela wrote: > > Em sáb., 27 de jun. de 2020 às 09:50, Christoph Berg > > escreveu: > > > > Re: Peter Eisentraut > > > What would be the advantage of using wolfSSL over OpenS

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 04:22:51PM -0300, Ranier Vilela wrote: > Em sáb., 27 de jun. de 2020 às 09:50, Christoph Berg > escreveu: > > Re: Peter Eisentraut > > What would be the advantage of using wolfSSL over OpenSSL? > > Avoiding the OpenSSL-vs-GPL linkage problem with readline. >

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Christoph Berg
Re: Ranier Vilela > I'm curious, how do you intend to solve a linking problem with > OpenSSL-vs-GPL-readline, with another GPL product? > WolfSSL, will provide a commercial license for PostgreSQL? It's replacing OpenSSL+GPL with GPL+GPL. > Isn't LIbreSSL a better alternative? I don't know. Chri

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Christoph Berg
Re: Jonah H. Harris > Somewhere, I recall seeing an open-source OpenSSL compatibility wrapper for > WolfSSL. Assuming that still exists, this patch seems entirely unnecessary. Unless you actually tried. Christoph

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Jonah H. Harris
On Sat, Jun 27, 2020 at 3:25 PM Ranier Vilela wrote: > Em sáb., 27 de jun. de 2020 às 09:50, Christoph Berg > escreveu: > >> Re: Peter Eisentraut >> > What would be the advantage of using wolfSSL over OpenSSL? >> >> Avoiding the OpenSSL-vs-GPL linkage problem with readline. >> > I'm curious, how

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Ranier Vilela
Em sáb., 27 de jun. de 2020 às 09:50, Christoph Berg escreveu: > Re: Peter Eisentraut > > What would be the advantage of using wolfSSL over OpenSSL? > > Avoiding the OpenSSL-vs-GPL linkage problem with readline. > I'm curious, how do you intend to solve a linking problem with OpenSSL-vs-GPL-readl

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Tom Lane
Christoph Berg writes: > It's a WIP patch, meant to see if it works at all. Of course OpenSSL > would stay as the default option. Fair enough. One thing that struck me as I looked at it was that most of the #include hackery seemed unnecessary. The configure script could add -I/usr/include/wolfs

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Christoph Berg
Re: Tom Lane > In any case, the patch as written seems to *remove* the option > to compile PG with OpenSSL. It's a WIP patch, meant to see if it works at all. Of course OpenSSL would stay as the default option. Christoph

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 11:16:26AM -0400, Tom Lane wrote: > Bruce Momjian writes: > > Also, wolfSSL is developed by a company and dual GPL/commerical > > licenses, so it seems like a mismatch to me. > > Yeah, that's definitely a factor behind my disinterest in > making wolfSSL be the only alterna

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Tom Lane
Bruce Momjian writes: > Also, wolfSSL is developed by a company and dual GPL/commerical > licenses, so it seems like a mismatch to me. Yeah, that's definitely a factor behind my disinterest in making wolfSSL be the only alternative. However, as long as it's available on GPL terms, I don't see a

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 10:56:46AM -0400, Tom Lane wrote: > Bruce Momjian writes: > > On Sat, Jun 27, 2020 at 02:50:27PM +0200, Christoph Berg wrote: > >> Re: Peter Eisentraut > >>> What would be the advantage of using wolfSSL over OpenSSL? > > >> Avoiding the OpenSSL-vs-GPL linkage problem with

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Tom Lane
Bruce Momjian writes: > On Sat, Jun 27, 2020 at 02:50:27PM +0200, Christoph Berg wrote: >> Re: Peter Eisentraut >>> What would be the advantage of using wolfSSL over OpenSSL? >> Avoiding the OpenSSL-vs-GPL linkage problem with readline. > Uh, wolfSSL is GPL2: > https://www.wolfssl.com/lice

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Bruce Momjian
On Sat, Jun 27, 2020 at 02:50:27PM +0200, Christoph Berg wrote: > Re: Peter Eisentraut > > What would be the advantage of using wolfSSL over OpenSSL? > > Avoiding the OpenSSL-vs-GPL linkage problem with readline. Uh, wolfSSL is GPL2: https://www.wolfssl.com/license/ Not sure why we woul

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Christoph Berg
Re: Peter Eisentraut > What would be the advantage of using wolfSSL over OpenSSL? Avoiding the OpenSSL-vs-GPL linkage problem with readline. Christoph

Re: Fwd: PostgreSQL: WolfSSL support

2020-06-27 Thread Peter Eisentraut
On 2020-06-27 00:33, Felix Lechner wrote: Is anyone here interested in helping to evaluate an experimental patch for wolfSSL support? What would be the advantage of using wolfSSL over OpenSSL? -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Re