Re: pgcrypto related backend crash on solaris 10/x86_64

From: Stefan Kaltenbrunner <stefan(at)kaltenbrunner(dot)cc>
To: Zdenek Kotala <Zdenek(dot)Kotala(at)Sun(dot)COM>
Cc: Marko Kreen <markokr(at)gmail(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: pgcrypto related backend crash on solaris 10/x86_64
Date: 2007-09-12 07:54:04
Message-ID: 46E79B1C.8040002@kaltenbrunner.cc
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Zdenek Kotala wrote:
> Marko Kreen wrote:
>> On 9/11/07, Zdenek Kotala <Zdenek(dot)Kotala(at)sun(dot)com> wrote:
>>> Marko Kreen wrote:
>>>> This is crashing because of the crippled OpenSSL on some version
>>>> of Solaris. Zdenek Kotala posted a workaround for that, I am
>>>> cleaning it but have not found the time to finalize it.
>>>>
>>>> I'll try to post v03 of Zdenek's patch ASAP.
>>
>>> However, I guess there still will be a problem with regression tests,
>>> because pg_crypto will reports error in case when user tries to use
>>> stronger cipher, but it generates diff between expected and real output.
>>>
>>> I don't know if is possible select different output based on test if
>>> strong crypto is installed or not. Maybe some magic in
>>> Makefile/Configure. Test should be:
>>>
>>> # ldd /usr/postgres/8.2/lib/pgcrypto.so | grep libcrypto_extra
>>> # libcrypto_extra.so.0.9.8 => (file not found)
>>>
>>> if output contains (file not found) library is not installed or not in
>>> path (/usr/sfw/lib).
>>
>> Failing regression tests are fine - it is good if user can
>> easily see that the os is broken.
>>
>
> But if build machine still complain about problem we can easily
> overlook another problems. There are two possible solution 1) modify reg
> test or 2) recommend to install crypto package on all affected build
> machine.
>
> Anyway I plan to add some mention into solaris FAQ when we will have
> final patch. I also think It should be good to mention in pg_crypto
> README or add comment into regression test expected output file which
> will be visible in regression.diff.

well in my opinion we should simply fail regression(not crash like we do
now) in case we have to deal with such a crippled openssl installation.
Adding information about that issue to the Solaris FAQ seems also like a
good thing.

Stefan

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Hannu Krosing 2007-09-12 08:28:00 Re: A Silly Idea for Vertically-Oriented Databases
Previous Message Guillaume Lelarge 2007-09-12 07:49:12 Re: Preparation for PostgreSQL releases 8.2.5, 8.1.10, 8.0.14, 7.4.18, 7.3.20