bloomberg / comdb2

Bloomberg's distributed RDBMS
Other
1.39k stars 214 forks source link

use the openssl EVP API for SHA1 and AES instead of the deprecated lo… #4840

Open frumioj opened 6 days ago

frumioj commented 6 days ago

To help us review your pull request, please consider providing an overview of the following:

This is sort of a bug-fix, but also improves security

Current behaviour is that you use a #pragma to remove warnings about using deprecated openssl features. This fix implements non-deprecated usage of the EVP APIs of openssl.

Try building and testing with the new code. Behaviour should be unchanged (still using AES and SHA-1 for encryption and key stretching) but the build should work correctly while not using the #pragma.

This new behaviour is better as it is more future-proof use of openssl, and is a more secure way to use the openssl APIs.