Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q2Bgk-0001sO-Fi for pgsql-admin@arkaria.postgresql.org; Thu, 25 May 2023 14:11:34 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1q2Bgh-0007cq-MF for pgsql-admin@arkaria.postgresql.org; Thu, 25 May 2023 14:11:31 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q2Bgg-0007bS-Pt for pgsql-admin@lists.postgresql.org; Thu, 25 May 2023 14:11:31 +0000 Received: from sonic302-2.consmr.mail.bf2.yahoo.com ([74.6.135.41]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1q2Bgd-001pdl-8g for pgsql-admin@lists.postgresql.org; Thu, 25 May 2023 14:11:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1685023885; bh=YATF5eu11RcfA2oL5dojlQmsmmwoXU6ysKh3+aaETl4=; h=Date:From:To:In-Reply-To:References:Subject:From:Subject:Reply-To; b=LbL+QbQTbivwuRHrcqVtP810EDpICO0tMGICenQT30WwJZlz219e3bSGTPGI8VeiFMoxgQsJy7NdpgQDT69w/o1XjahBi7mxFUeV+wqpvpJtubS6fww9ptO5NHAW+OeiyMqTHWzJH6BUyXDQkJAbGbVXF4k6TzcwSy8N76BIIpe/jffS1zUK4t+emUDklWiHptVS7WDNTzzg+KAgh0LErmbPaUPbyVFjMbnxA/yZijmHCsNBdtZHNg553xzHFtsRWYz4X1EifIK2CW5K/fSggR+o436eZ6XEl2kRrEDhP7CLNV5L2nl3lA/HItlnLve6PeuNTy4iSU9EGSSeZdq/1g== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1685023885; bh=tEGxQ/8l5XzwK/I2hPQW8KWqjoy7K9HlARWuYFoRcez=; h=X-Sonic-MF:Date:From:To:Subject:From:Subject; b=uRQutqXCGKhEl+oxc8ZekJRIzR9llmyo4gy7DgtYah0JKb4GFXfzN0S1j9kOQ5PZJBUpJH6a/XCH2egCMZGZy6pfMAZp3PxnbYj8pWZhSBy2nTOK45jqVmsjAGP/8O1OjJ6Kw5BXWHoNK+sRnPFPPiDAWDPJ6Zas/yYgGq9eh7HRF49Cj0BIp0yNK74DqAhqVnpY0GLzLhyqLP//05P3xWVXb61dUUp3ww2oIEfqM7/dirLwL1HUwWUuOJNjZQcwLZJkLuukzZG/G9/fLNXP4Cu11HWLNYtzUQO1wRbVEY/sAC55g8bZty14HnL+yzDTZeztSUHKLEMEDTS4KEbCiw== X-YMail-OSG: 3ZaJrl8VM1nfBH9Eib3rPcP2hNRwW1lZMdJOHedRQ04X3CTMRAw2tJY_FixH3uD mu5bHvwqY8WEVg8YZn8c.VyVXpRVBvlf5cm.ONbxIKTf2HBnp8t1uVHo.gqpkewp0SDDTSAMvlOC 04ns3c_a51dRzE0oBXJdI55KXcbB8W0fHAMCYf7Uf4rtWar06JI_d5SlzXWG5uxqn2PmDMHxKkyJ pnE1DvplwYdx6r5T0qepLbc24n9c0mlBCYHoPV99ze0LDj5FKi3feHbdRjYHxvK8zC1WqjcLA9Xk IlWq5VCOn3e19sXElQSxNkVQDvcWUJxWmvFv9WHJ0unIVTYSnFkEZLaVCevPmSGg9k8N9fMoE4h9 asLiSaNzugC5wq6Jj_5qyGOlbLxp6VpJcKpluOF72nX2osrEDHexfSC7Aud269yOJlsgUWzhEAIT kWuisJj1OCs.ZPvKq7JO0osQXjc8rJSTejY1ymJeqwtGLSYPxnlrxEFAkpLRPofOKV4P0ScjKsdE WZue2SC0lB.OB71cU3B9_AsSG8MtcDnWfl4Q9q1eYiZZB5oDN4d7SM5LsjXga4y5KIE3aPz7gq2E a5fW2JWzzAdypWv7ZkdLwjUbC3mBk4b25l72j.T8PqED9AYAxpGwGRqMKL9F6_u_uIc3K5jBQylQ wDTUJs8SG0geY.ZAJLP3cFvAydFpzw2SjmvoS6Crbg3WUhYeI0KZ9m36AEjZT6cBlSSfrAoRFz4G M4DuoWvJJHj20d1t3PK7DbtXToIu9nV7g1oR7GnrNjHD3PTzIEeAC0mYuEKWUTEFcMjK3Mu_KMT0 rV_DNapWq807nrkbYYljwnRpiqduTZHz8hSqxgGmfiir8iN7olZRGRuR4vNWej43y_wlMpZ3dUFf QtG8dpIgbDvHzSDHNh8cpvJPod8NxloUyfondpMfj_QYbWkpupAqFTNsNETScsnED0uUMp0AWvrB cK20a13CxC4vCBEetbOzerZyo630XP1EC6.mok4fUV1BLbtSDx96YCiLILckJPFOLprtXsISCO0M kYhJgWCgr5AHmJRW1mJS2ZHbx3x8A8.YEjbeclCSA2gtDqHlfdncfN7kMZC1EvKSLLXMvdtt2Qqo o1uls9feSXDiTrEMkNIYtcyOQaiPvp0y6INjZmhLb.o36FJdRFpJRi8yuf7QyokXz4zJa8N0RYSn 1Yht.UFhX5wJcOVT1uChnmP7Szax3z1T1zKqsFPhunbiJhrm92clkem0CDreS4lnDLdEl6FDdPQ7 4wo45fvoxLrzdC4S4dtVEiqRbBz3oFfRlPm_JRuvpBdRQrvwmoXYCxUaGmifxG3Iiza5QTcazfLY 3S1v5UUXwxd0Xd8yT.oz9HfepXv562LQEUDHRjVMicwSiqODnL2NFrQ7aZFWdU_Fy2xrjzv4eUM2 42fKapolXD8PIXewFEWPTT9YBwXb7NJ3ubisJvO41C_zSRkro.5G86bLvLmACkhdri8SIqjfpxaN DT9b7HFGQBnfZG_JfZB0O1O_DwPR_UGUGwV8piBlge.7SHxF7TxesYzHYIQA4HnxVaCyBu7AZalE quT44S_PTGGlIkh_NoRPaP8wyDAg880rmZDNZW83kKqm.HPN.eZQz9tGEDZ3PY8I.mEBLKjY02Bt 1_seV76o6PvLTDxilW8qQ8ExksYz4hn_sV9CK3zqwV548WUwlFLcuqTTiCf.5vRHKWLG3nxYfgz7 izL7x5W8WLTHdb9UhcfyY7Glg93SG2FRgSWo1YopD5tFSuILA5FeYNkNehcsspQqyGj_IlRNYf8E RWl3a3zfue_jMBZIqAlzX.5iysRCFdFjVPl9ZeRA9ohqhpkrMgXfrf0BXZ2nyAyFy_6Ea5be7WV5 DzWwCqRNVUQx_Ksj6ezD1HmeuMe09KA2aslw9pQrNysROdeoxLPvTzn5rQxuNoswSkGizmVZIcej KbPelNtbkbpE9pcBaJU4Jrpgskt.x00RQ0pMX6WvEyD0rVPoBAj45RiW9DN5cVwGlU5bj0ZZigyN UK7d6g3Z_xpWq8Z4oUfLhiZGi6s0spODBdoPcFwzTVMFPNxGJwNRiDvGUAhzqfIxrm43ror93Hc_ Trg.Vw8Yye27nNQnJiFkcijwOtjNw7GXN5wqPDYikdMixRYoI1nCrwX2q_J.WfvWsWYoh3yOXBHK Y0v2avVXgF_CQXH65P2ian1K_50eBBXU.qx_wF7Dq757KYftNXR1Yx00JbHL8JsFdQIvM9CCrOL2 oD45ZZlse_kAtwfmeAyZ82X0iYV_AL_R_Vg-- X-Sonic-MF: X-Sonic-ID: 6d0b2e04-5f7a-4a5e-bc55-2def8d2bcc2d Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.bf2.yahoo.com with HTTP; Thu, 25 May 2023 14:11:25 +0000 Date: Thu, 25 May 2023 14:11:20 +0000 (UTC) From: Daxu Yin To: "pgsql-admin@lists.postgresql.org" Message-ID: <626583558.1334535.1685023880527@mail.yahoo.com> In-Reply-To: References: Subject: pgAdmin4 v6.21 on RHEL7.9 with FIPS enabled MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_1334534_1554873216.1685023880525" X-Mailer: WebService/1.1.21495 YMailNorrin Content-Length: 10916 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk ------=_Part_1334534_1554873216.1685023880525 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi,=C2=A0 I am new to this list, please forgive me if I am submitting the following t= o the wrong place. We've just installed pgAdmin4 web on RHEL7.9.Once we started the httpd serv= ice, we couldn't login the system, the webpage spins forever.The error mess= age is attached below.The RHEL 7.9 we use has FIPS enabled, e.g.=C2=A0cat /= proc/sys/crypto/fips_enabled has a value of 1. It seems the version of pgAdmin4, 6.21, still uses MD5, which is not allowe= d by FIPS. I'd highly appreciate if anyone could let us know: 1. Is there a version of pgAdmin4 on RHEL 7.9 that supports FIPS?2. Is ther= e any plan down the road that pgAdmin4 would support FIPS on RHEL 7.9?3. Is= there any way to get around the issue? Many thanks in advance, =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3DError msg in pgadmin log file =3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D202= 3-05-16 03:04:13,593: ERROR=C2=A0 pgadmin:=C2=A0 =C2=A0 =C2=A0 =C2=A0 [digi= tal envelope routines: EVP_DigestInit_ex] disabled for fipsTraceback (most = recent call last):=C2=A0 File "/usr/pgadmin4/venv/lib64/python3.6/site-pack= ages/flask/app.py", line 1516, in full_dispatch_request=C2=A0 =C2=A0 rv =3D= self.dispatch_request()=C2=A0 File "/usr/pgadmin4/venv/lib64/python3.6/sit= e-packages/flask/app.py", line 1502, in dispatch_requestConnection to 10.13= 8.182.10 closed by remote host.le.endpoint])(**req.view_args)Connection to = 10.138.182.10 closed.thon3.6/site-packages/flask_login/utils.py", line 272,= in decorated_view[daxu@ip-192-168-40-129 ~]$ rgs)=C2=A0 File "/usr/pgadmin= 4/web/pgadmin/browser/__init__.py", line 634, in utils=C2=A0 =C2=A0 current= _ui_lock=3Dcurrent_ui_lock=C2=A0 File "/usr/pgadmin4/venv/lib64/python3.6/s= ite-packages/flask/templating.py", line 150, in render_template=C2=A0 =C2= =A0 ctx.app,=C2=A0 File "/usr/pgadmin4/venv/lib64/python3.6/site-packages/f= lask/templating.py", line 128, in _render=C2=A0 =C2=A0 rv =3D template.rend= er(context)=C2=A0 File "/usr/pgadmin4/venv/lib64/python3.6/site-packages/ji= nja2/environment.py", line 1291, in render=C2=A0 =C2=A0 self.environment.ha= ndle_exception()=C2=A0 File "/usr/pgadmin4/venv/lib64/python3.6/site-packag= es/jinja2/environment.py", line 925, in handle_exception=C2=A0 =C2=A0 raise= rewrite_traceback_stack(source=3Dsource)=C2=A0 File "/usr/pgadmin4/web/pga= dmin/browser/templates/browser/js/utils.js", line 119, in top-level templat= e code=C2=A0 =C2=A0 gravatar: {% if config.SHOW_GRAVATAR_IMAGE %}'{{ userna= me | gravatar }}'{% else %}''{% endif %},=C2=A0 File "/usr/pgadmin4/venv/li= b64/python3.6/site-packages/flask_gravatar/__init__.py", line 151, in __cal= l__=C2=A0 =C2=A0 hash =3D hashlib.md5(email.encode('utf-8')).hexdigest()Val= ueError: [digital envelope routines: EVP_DigestInit_ex] disabled for fips Daxu Yin 410-340-5842 =20 On Thursday, May 25, 2023 at 09:03:19 AM EDT, Ron wrote: =20 =20 On 5/25/23 03:21, Ravi GH wrote: > Hello PG Admins , Team :) > > We have enabled SSL Based replication & connection from Application to=20 > PostgreSql DB using SSL via pgbouncer. > > My Question is in regard to implementing DataBase Encryption. > > Background=C2=A0: We are using PostgreSql DB for Atlassian Bitbucket Appl= ication. > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0We want to implement=C2=A0encryption=C2=A0for databases=C2=A0at= =20 > system level (=C2=A0 it can be at rest (archive) PgBackRest can encrypt it's backups using AES-256. > or while retrieving=C2=A0(accessing it)). > > Seeking guidance in this regard on How to enable DataBase Encryption of= =20 > Postgresql DB. Can anyone guide me in this regard or share a few pointers= =20 > pages on "How to enable it" or any 3rd party tools that can do ths. > > Thanks & Regards, > Ravi --=20 Born in Arizona, moved to Babylonia. =20 ------=_Part_1334534_1554873216.1685023880525 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi, 

I am = new to this list, please forgive me if I am submitting the following to the= wrong place.

We've just installed pgAdmin4 web on RHEL7.= 9.
Once we started the httpd se= rvice, we couldn't login the system, the webpage spins forever.
The error message is attached below.
=
The RHEL 7.9 we use has FIPS enabled= , e.g. cat /proc/sys/crypto/fips_enabled has a value of 1.

It seems the version of pgAdmin4, 6.= 21, still uses MD5, which is not allowed by FIPS.

= I'd highly appreciate if anyone could let us know:

1. Is = there a version of pgAdmin4 on RHEL 7.9 that supports FIPS?
2. Is there any plan down the road that pgAd= min4 would support FIPS on RHEL 7.9?
3. Is there any way to get around the issue?

Many t= hanks in advance,

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3DError msg in pgadmin log file =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
2023-05-16 03:04:13,593: ERROR  pgadmin:    &nb= sp;   [digital envelope routines: EVP_DigestInit_ex] disabled for fips=
Traceback (most recent call last):
  File "/usr/p= gadmin4/venv/lib64/python3.6/site-packages/flask/app.py", line 1516, in ful= l_dispatch_request
    rv =3D self.dispatch_request()
  File "/usr/pgadmin4/venv/lib64/python3.6/site-packages/flas= k/app.py", line 1502, in dispatch_request
Connection to 10.138.18= 2.10 closed by remote host.le.endpoint])(**req.view_args)
Connect= ion to 10.138.182.10 closed.thon3.6/site-packages/flask_login/utils.py", li= ne 272, in decorated_view
[daxu@ip-192-168-40-129 ~]$ rgs)
<= div>  File "/usr/pgadmin4/web/pgadmin/browser/__init__.py", line 634, = in utils
    current_ui_lock=3Dcurrent_ui_lock
  File "/usr/pgadmin4/venv/lib64/python3.6/site-packages/flask/templ= ating.py", line 150, in render_template
    ctx.app,
  File "/usr/pgadmin4/venv/lib64/python3.6/site-packages/flask= /templating.py", line 128, in _render
    rv =3D templa= te.render(context)
  File "/usr/pgadmin4/venv/lib64/python3.= 6/site-packages/jinja2/environment.py", line 1291, in render
&nbs= p;   self.environment.handle_exception()
  File "/usr/p= gadmin4/venv/lib64/python3.6/site-packages/jinja2/environment.py", line 925= , in handle_exception
    raise rewrite_traceback_stack= (source=3Dsource)
  File "/usr/pgadmin4/web/pgadmin/browser/= templates/browser/js/utils.js", line 119, in top-level template code
<= div>    gravatar: {% if config.SHOW_GRAVATAR_IMAGE %}'{{ username= | gravatar }}'{% else %}''{% endif %},
  File "/usr/pgadmin= 4/venv/lib64/python3.6/site-packages/flask_gravatar/__init__.py", line 151,= in __call__
    hash =3D hashlib.md5(email.encode('utf= -8')).hexdigest()
ValueError: [digital envelope routines: EVP_Dig= estInit_ex] disabled for fips




Daxu Yin
410-340-5842


=20
=20
On Thursday, May 25, 2023 at 09:03:19 AM EDT, Ron <r= onljohnsonjr@gmail.com> wrote:


On 5/25/23 03:21, Ravi GH wrote:
> Hello PG Admins , Team :)
>
> We have enabled SSL Based replication & connection from= Application to
> PostgreSql DB using SSL via pgbounc= er.
>
> My Question is in regard = to implementing DataBase Encryption.
>
> Background : We are using PostgreSql DB for Atlassian Bitbucke= t Application.
>           &n= bsp;            We want to implement enc= ryption for databases at
> system level (&n= bsp; it can be at rest (archive)

PgBac= kRest can encrypt it's backups using AES-256.


> or while retrieving (accessing it)).
>
> Seeking guidance in this regard on How to enable DataBa= se Encryption of
> Postgresql DB. Can anyone guide me= in this regard or share a few pointers
> pages on "H= ow to enable it" or any 3rd party tools that can do ths.
= >
> Thanks & Regards,
> Ra= vi


--
Born in= Arizona, moved to Babylonia.



------=_Part_1334534_1554873216.1685023880525--