Percona-Lab / pg_tde

MIT License
107 stars 19 forks source link

Fixing errors with OpenSSL 1.0/1.1 #105

Closed dutow closed 7 months ago

dutow commented 8 months ago

Issue: there's a slight behavior difference between OpenSSL 1.1 and 3.0 in regards to padding, and how the EVP encryption/decryption functions exactly behave.

Our code also incorrectly used these functions until now, which by chance worked correctly with 3.0, but caused decryption issues with 1.0/1.1.

This commit: