public inbox for [email protected]  

help / color / mirror / Atom feed

From: Mark Wong <[email protected]>
To: Tom Lane <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: New buildfarm animals with FIPS mode enabled
Date: Sat, 15 Feb 2025 08:55:32 -0800
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>

Hi Tom,

On 2/14/25 10:01 AM, Tom Lane wrote:
> I see that somebody decided to crank up some animals running
> RHEL8 and RHEL9 with FIPS mode turned on.  The RHEL9 animals
> pass on v17 and master, but not older branches; the RHEL8
> animals pass nowhere.  This is unsurprising given that the
> v17-era commits that allowed our regression tests to pass
> under FIPS mode (795592865 and a bunch of others) explicitly
> targeted only OpenSSL 3:
> 
>      These new expected files currently cover the FIPS mode provided by
>      OpenSSL 3.x as well as the modified OpenSSL 3.x from Red Hat (e.g.,
>      Fedora 38), but not the modified OpenSSL 1.x from Red Hat (e.g.,
>      Fedora 35).  (The latter will have some error message wording
>      differences.)
> 
> I'm kind of disinclined to do all the work that'd be needed to turn
> these animals completely green, especially when the reason to do it
> seems to be that someone decided we should without any community
> consultation.  Perhaps others have different opinions though.	

That's my fault.  I did a sloppy job copying configs etc from the s390x 
fips animals and forgot about the OS versions, branches, etc.  Peter 
Eisentraut reminded me I think I cleaned that all up.

Regards,
Mark

view thread (4+ messages)

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: New buildfarm animals with FIPS mode enabled
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox