Re: Allow tests to pass in OpenSSL FIPS mode - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Allow tests to pass in OpenSSL FIPS mode
Date
Msg-id 0a8601d4-a2ac-a5f1-b9f0-de7c00736dfa@eisentraut.org
Whole thread Raw
In response to Re: Allow tests to pass in OpenSSL FIPS mode  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
On 05.10.23 22:55, Tom Lane wrote:
> I found another bit of fun we'll need to deal with: on my F38
> platform, pgcrypto/3des fails as attached.  Some googling finds
> this relevant info:
> 
> https://github.com/pyca/cryptography/issues/6875
> 
> That is, FIPS deprecation of 3DES is happening even as we speak.
> So apparently we'll have little choice but to deal with two
> different behaviors for that.

Hmm, interesting, so maybe there should be a new openssl 3.x release at 
the end of the year that addresses this?



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: Allow tests to pass in OpenSSL FIPS mode
Next
From: "Rares Pop (Treelet)"
Date:
Subject: Custom tstzrange with importance factored in