US VISA CISP PCI comp. needs SHA1 - Mailing list pgsql-hackers

From Matthew Wetmore
Subject US VISA CISP PCI comp. needs SHA1
Date
Msg-id 47F3C132.8000002@secomintl.com
Whole thread Raw
Responses Re: US VISA CISP PCI comp. needs SHA1  (Alvaro Herrera <alvherre@commandprompt.com>)
Re: US VISA CISP PCI comp. needs SHA1  (Andrew Dunstan <andrew@dunslane.net>)
List pgsql-hackers
Not sure if I posted in correct spot....


pg_8.2.6
Centos5
Windows based app.
encryped pwd = yes
SSL = yes,
hostssl with explicit IP w/md5. (no pg_crypto)



We are in process of VISA CISP PCI compliance for our application.
(online cc auth - no stored cc data) [next phase will include stored cc
data]

We just heard back today that they would like to use SHA1 for pwd auth.

does anyone have any doco that will support md5 vs. SHA1?

We also have global customers so we understand the us v non-US export stuff.

Any direction is appreciated.

Thanks in advance.

/matthew wetmore

-- 

Matthew Wetmore
Secom International, Inc
9610 Bellanca, Ave.
Los Angeles, CA 90045
310-641-1290


This e-mail is intended for the addressee shown. It contains information
that is confidential and protected from disclosure. Any review,
dissemination or use of this transmission or its contents by persons or
unauthorized employees of the intended organisations is strictly
prohibited.
The contents of this email do not necessarily represent the views or
policies of Secom International Inc., or its employees.


pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: [GENERAL] SHA1 on postgres 8.3
Next
From: Alvaro Herrera
Date:
Subject: Re: US VISA CISP PCI comp. needs SHA1