Disable OpenSSL EVP digest padding in pgcrypto
authorDaniel Gustafsson <[email protected]>
Sat, 25 Sep 2021 09:27:20 +0000 (11:27 +0200)
committerDaniel Gustafsson <[email protected]>
Sat, 25 Sep 2021 09:27:20 +0000 (11:27 +0200)
commite802b594e7946d7fea9302f2231943c36255e084
treefa9e292633000eb674fa138eabefee2981a7d7eb
parent841075a65cdc2d034dd8a473f25c5f584c8856d7
Disable OpenSSL EVP digest padding in pgcrypto

The PX layer in pgcrypto is handling digest padding on its own uniformly
for all backend implementations. Starting with OpenSSL 3.0.0, DecryptUpdate
doesn't flush the last block in case padding is enabled so explicitly
disable it as we don't use it.

This will be backpatched to all supported version once there is sufficient
testing in the buildfarm of OpenSSL 3.

Reviewed-by: Peter Eisentraut, Michael Paquier
Discussion: https://postgr.es/m/FEF81714-D479-4512-839B-C769D2605F8A@yesql.se
Backpatch-through: 9.6
contrib/pgcrypto/openssl.c