From: Imran Haider <ihaiderk@gmail.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
To: pramod kg <pramod11287@gmail.com>
Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Re: Is PG CE is FIPS Aware?
Date: Thu, 27 Jan 2022 11:20:23 +0530
Message-ID: <f35c335c-5b39-4307-8761-c29811488a19@Spark> (raw)
In-Reply-To: <CAHkcXnzEuJ_UMZxAtdeVR2fVKZ=YgNwQecUX2bvVq9aMP5bK7g@mail.gmail.com>
References: <CAHkcXnxfqtSAo3J+Pbz3v8u4-73pgn5HXtoyYXxe2zTx9SrScg@mail.gmail.com>
<2536077.1643261557@sss.pgh.pa.us>
<CAHkcXnzEuJ_UMZxAtdeVR2fVKZ=YgNwQecUX2bvVq9aMP5bK7g@mail.gmail.com>
https://www.stigviewer.com/stig/postgresql_9.x/
Regards,
Imran Haider
On 27 Jan 2022, 11:18 +0530, pramod kg <pramod11287@gmail.com>, wrote:
> Thanks Tom for your quick response.
>
> I executed query. Got output.
>
> postgres=# SELECT md5('foo');
> md5
> ----------------------------------
> acbd18db4cc2f85cedef654fccc4a4d8
> (1 row)
>
>
> Do we have official documentation or any blogs which guides us to make PG installation FIPS Compliant? Also, is it achievable via RPM based installation? Or do we need to compile libraries?
>
>
>
>
>
>
> On Thu, Jan 27, 2022 at 11:02 AM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> > pramod kg <pramod11287@gmail.com> writes:
> > > How to determine whether PG installed in a server is FIPS aware or not(FIPS
> > > 140-2 compliant)? We are doing RPM based installation.
> >
> > If "SELECT md5('foo')" fails, then FIPS restrictions are active.
> >
> > regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: ihaiderk@gmail.com, tgl@sss.pgh.pa.us, pramod11287@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Is PG CE is FIPS Aware?
In-Reply-To: <f35c335c-5b39-4307-8761-c29811488a19@Spark>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox