On 2019-02-26 23:35, Michael Paquier wrote: > What I do in such cases is to compile OpenSSL by myself and link > Postgres to it, here is a command to build shared libraries (all that > is documented in INSTALL): > ./config --prefix=$INSTALLPATH shared
I did test it now using a custom-built OpenSSL, and I can confirm it works. > Another trick would be to comment out the sections in libpq where > HAVE_PGTLS_GET_PEER_CERTIFICATE_HASH is used to emulate a compilation > with OpenSSL 1.0.1 features and older, while still linking with > 1.0.2. Yeah, that might have been easier. ;-) -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
