Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-09-26 Thread Zdenek Kotala
Stefan Kaltenbrunner wrote: Bruce Momjian wrote: Just confirming, this should be applied to 8.3, right? I think marko is working on an updated patch for this: http://archives.postgresql.org/pgsql-hackers/2007-09/msg00386.php without that the backend will coredump if ones uses string ciphers

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-09-26 Thread Stefan Kaltenbrunner
Bruce Momjian wrote: Just confirming, this should be applied to 8.3, right? I think marko is working on an updated patch for this: http://archives.postgresql.org/pgsql-hackers/2007-09/msg00386.php without that the backend will coredump if ones uses string ciphers with pgcrypto on a default s

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-09-26 Thread Bruce Momjian
Just confirming, this should be applied to 8.3, right? --- Zdenek Kotala wrote: > Stefan reported me that prcrypto regression test fails on solaris 10 > with openssl support. I investigated this problem and the result is th

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Tom Lane
Stefan Kaltenbrunner <[EMAIL PROTECTED]> writes: > Marko Kreen wrote: >> So we can revisit the issue when we are ready to drop >> support for 0.9.6x. > the last openssl 0.9.6 release was in march 2004 and 0.9.7 is available > since early 2003 - I don't think dropping support for it in 8.3+ would >

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Marko Kreen
On 7/24/07, Stefan Kaltenbrunner <[EMAIL PROTECTED]> wrote: Marko Kreen wrote: > So we can revisit the issue when we are ready to drop > support for 0.9.6x. the last openssl 0.9.6 release was in march 2004 and 0.9.7 is available since early 2003 - I don't think dropping support for it in 8.3+ wo

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Stefan Kaltenbrunner
Marko Kreen wrote: > On 7/24/07, Zdenek Kotala <[EMAIL PROTECTED]> wrote: >> Marko Kreen wrote: >> > NAK. The fix is broken because it uses EVP interface. EVP is not >> > a general-purpose interface because not all valid keys for cipher >> > pass thru it. Only key-lengths used in SSL will work..

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Marko Kreen
On 7/24/07, Zdenek Kotala <[EMAIL PROTECTED]> wrote: Marko Kreen wrote: > NAK. The fix is broken because it uses EVP interface. EVP is not > a general-purpose interface because not all valid keys for cipher > pass thru it. Only key-lengths used in SSL will work... I'm not openssl expert, but

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Zdenek Kotala
Marko Kreen wrote: On 7/24/07, Zdenek Kotala <[EMAIL PROTECTED]> wrote: However, on default installation (which is commonly used) it is a problem. Regression test cannot be fixed because it tests strong ciphers, but there two very strange issue: 1) First issue is blowfish cipher. Because pg

Re: [HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Marko Kreen
On 7/24/07, Zdenek Kotala <[EMAIL PROTECTED]> wrote: Stefan reported me that prcrypto regression test fails on solaris 10 with openssl support. I investigated this problem and the result is that Solaris 10 delivers only support for short keys up to 128. Strong crypto (SUNWcry and SUNWcryr package

[HACKERS] pgcrypto & strong ciphers limitation

2007-07-24 Thread Zdenek Kotala
Stefan reported me that prcrypto regression test fails on solaris 10 with openssl support. I investigated this problem and the result is that Solaris 10 delivers only support for short keys up to 128. Strong crypto (SUNWcry and SUNWcryr packages) is available on web download pages. (It is resul