summarylogtreecommitdiffstats
path: root/0002-Disable-unsupported-functions.patch
diff options
context:
space:
mode:
authorGonzalo Exequiel Pedone2024-03-24 21:15:26 -0300
committerGonzalo Exequiel Pedone2024-03-24 21:15:26 -0300
commit6e2123da400781870a23573c27256ec58ba7052d (patch)
treefbd80c57d9028494a164d12a3b5f5c747f194054 /0002-Disable-unsupported-functions.patch
downloadaur-6e2123da400781870a23573c27256ec58ba7052d.tar.gz
New package.
Diffstat (limited to '0002-Disable-unsupported-functions.patch')
-rw-r--r--0002-Disable-unsupported-functions.patch64
1 files changed, 64 insertions, 0 deletions
diff --git a/0002-Disable-unsupported-functions.patch b/0002-Disable-unsupported-functions.patch
new file mode 100644
index 000000000000..aca19b693c47
--- /dev/null
+++ b/0002-Disable-unsupported-functions.patch
@@ -0,0 +1,64 @@
+--- a/src/backend/libpq/be-secure-openssl.c
++++ b/src/backend/libpq/be-secure-openssl.c
+@@ -973,61 +973,11 @@
+ static DH *
+ load_dh_file(char *filename, bool isServerStart)
+ {
+- FILE *fp;
+- DH *dh = NULL;
+- int codes;
+-
+- /* attempt to open file. It's not an error if it doesn't exist. */
+- if ((fp = AllocateFile(filename, "r")) == NULL)
+- {
+- ereport(isServerStart ? FATAL : LOG,
+- (errcode_for_file_access(),
+- errmsg("could not open DH parameters file \"%s\": %m",
+- filename)));
+- return NULL;
+- }
+-
+- dh = PEM_read_DHparams(fp, NULL, NULL, NULL);
+- FreeFile(fp);
+-
+- if (dh == NULL)
+- {
+ ereport(isServerStart ? FATAL : LOG,
+ (errcode(ERRCODE_CONFIG_FILE_ERROR),
+ errmsg("could not load DH parameters file: %s",
+ SSLerrmessage(ERR_get_error()))));
+ return NULL;
+- }
+-
+- /* make sure the DH parameters are usable */
+- if (DH_check(dh, &codes) == 0)
+- {
+- ereport(isServerStart ? FATAL : LOG,
+- (errcode(ERRCODE_CONFIG_FILE_ERROR),
+- errmsg("invalid DH parameters: %s",
+- SSLerrmessage(ERR_get_error()))));
+- DH_free(dh);
+- return NULL;
+- }
+- if (codes & DH_CHECK_P_NOT_PRIME)
+- {
+- ereport(isServerStart ? FATAL : LOG,
+- (errcode(ERRCODE_CONFIG_FILE_ERROR),
+- errmsg("invalid DH parameters: p is not prime")));
+- DH_free(dh);
+- return NULL;
+- }
+- if ((codes & DH_NOT_SUITABLE_GENERATOR) &&
+- (codes & DH_CHECK_P_NOT_SAFE_PRIME))
+- {
+- ereport(isServerStart ? FATAL : LOG,
+- (errcode(ERRCODE_CONFIG_FILE_ERROR),
+- errmsg("invalid DH parameters: neither suitable generator or safe prime")));
+- DH_free(dh);
+- return NULL;
+- }
+-
+- return dh;
+ }
+
+ /*