From: Peter Eisentraut <peter@eisentraut.org>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: pgcrypto: Allow tests to pass in OpenSSL FIPS mode
Date: Fri, 17 Nov 2023 14:01:13 +0000
Message-ID: <E1r3zPE-005t9g-MU@gemulon.postgresql.org> (raw)
pgcrypto: Allow tests to pass in OpenSSL FIPS mode
This adds several alternative expected files for when MD5 and 3DES are
not available. This is similar to the alternative expected files for
when the legacy provider is disabled. In fact, running the pgcrypto
tests in FIPS mode makes use of some of these existing alternative
expected files as well (e.g., for blowfish).
These new expected files currently cover the FIPS mode provided by
OpenSSL 3.x as well as the modified OpenSSL 3.x from Red Hat (e.g.,
Fedora 38), but not the modified OpenSSL 1.x from Red Hat (e.g.,
Fedora 35). (The latter will have some error message wording
differences.)
Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us>
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://www.postgresql.org/message-id/flat/dbbd927f-ef1f-c9a1-4ec6-c759778ac852%40enterprisedb.com
Branch
------
master
Details
-------
https://git.postgresql.org/pg/commitdiff/795592865c96b58016a883ac6390c985f140918d
Modified Files
--------------
contrib/pgcrypto/expected/3des_1.out | 29 ++++++++++++++++
contrib/pgcrypto/expected/crypt-md5_1.out | 16 +++++++++
contrib/pgcrypto/expected/hmac-md5_1.out | 44 +++++++++++++++++++++++++
contrib/pgcrypto/expected/md5_1.out | 17 ++++++++++
contrib/pgcrypto/expected/pgp-encrypt-md5_1.out | 7 ++++
5 files changed, 113 insertions(+)
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-committers@postgresql.org
Cc: peter@eisentraut.org, pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: pgcrypto: Allow tests to pass in OpenSSL FIPS mode
In-Reply-To: <E1r3zPE-005t9g-MU@gemulon.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox