Re: New buildfarm animals with FIPS mode enabled - Mailing list pgsql-hackers

From Daniel Gustafsson
Subject Re: New buildfarm animals with FIPS mode enabled
Date
Msg-id 1CB7E685-9D71-4690-860F-5533119C0997@yesql.se
Whole thread Raw
In response to Re: New buildfarm animals with FIPS mode enabled  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: New buildfarm animals with FIPS mode enabled
List pgsql-hackers
> On 17 Feb 2025, at 17:26, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>
> Mark Wong <markwkm@gmail.com> writes:
>> On Feb 17, 2025, at 2:36 AM, Álvaro Herrera <alvherre@alvh.no-ip.org> wrote:
>>> As I understand, both of these Ubuntu versions ship with OpenSSL 1.1,
>>> though of course OpenSSL 3 could be installed on them.  Should I just
>>> delete these requests?
>
>> I’m away from my desk until later this week so I don’t recall whether Ubuntu with FIPS is supposed to work.  If
someonealready knows I’m ok with deleting them. Otherwise I will double check soon… 
>
> I believe the main concern is OpenSSL 1.x versus 3.x, not a specific
> platform.

Isn't it postgres version mostly?  We fixed so the testsuite passed on FIPS
enabled machines by just not using anything that violates FIPS but I don't
remember anything OpenSSL version specific.

--
Daniel Gustafsson




pgsql-hackers by date:

Previous
From: Alena Rybakina
Date:
Subject: Re: Showing primitive index scan count in EXPLAIN ANALYZE (for skip scan and SAOP scans)
Next
From: Tom Lane
Date:
Subject: Re: New buildfarm animals with FIPS mode enabled