Rodney Lott <rlott@evertz.com> writes:
> So, my question is this: In FIPS mode, what would cause the random
> number generation to not initialize?
I remember that Red Hat's version of "FIPS mode" involved crypto features
(including RNGs) just refusing to work in modes deemed inadequately
secure. So my guess is that psql is trying to configure OpenSSL with some
inadequately-secure settings. Not sure why it'd be different from the
server though. Are you sure psql and the libpq it's using are same
version as the apparently-working server?
regards, tom lane
