Postgres Pro
Downloads
Home   >   mailing lists

JDBC-Platform error: unsupported key for HMAC algorithm - Mailing list pgsql-jdbc

From James Pang (chaolpan)
Subject JDBC-Platform error: unsupported key for HMAC algorithm
Date
Msg-id PH0PR11MB5191B495CBFE198A2B11AC1ED6B29@PH0PR11MB5191.namprd11.prod.outlook.com
Whole thread Raw
Responses RE: JDBC-Platform error: unsupported key for HMAC algorithm
List pgsql-jdbc
Tree view

Hi,

   Postgresql server 13.4 on RHEL8.4 FIPS,    JAVA client use Postgres JDBC driver 42.3.3 to connect to database with TLS/SSL.  Without fips mode, it’s ok to login with TLSv1.2 and default SSL parameters, but when enable fips mode on JAVA client side. It failed in below error:

  at java.lang.Thread.run(Thread.java:750) │
│ Caused by: java.lang.RuntimeException: Platform error: unsupported key for HMAC algorithm │
│ at org.postgresql.shaded.com.ongres.scram.common.util.CryptoUtil.hmac(CryptoUtil.java:147) │
│ at org.postgresql.shaded.com.ongres.scram.common.ScramMechanisms.hmac(ScramMechanisms.java:143) │
│ at org.postgresql.shaded.com.ongres.scram.common.ScramFunctions.hmac(ScramFunctions.java:70) │
│ at org.postgresql.shaded.com.ongres.scram.common.ScramFunctions.clientKey(ScramFunctions.java:85) │
│ at org.postgresql.shaded.com.ongres.scram.client.ScramSession$ClientFinalProcessor.<init>(ScramSession.java:188) │
│ at org.postgresql.shaded.com.ongres.scram.client.ScramSession$ClientFinalProcessor.<init>(ScramSession.java:194) │
│ at org.postgresql.shaded.com.ongres.scram.client.ScramSession$ClientFinalProcessor.<init>(ScramSession.java:163) │
│ at org.postgresql.shaded.com.ongres.scram.client.ScramSession$ServerFirstProcessor.clientFinalProcessor(ScramSession.java:130) │
│ at org.postgresql.jre7.sasl.ScramAuthenticator.processServerFirstMessage(ScramAuthenticator.java:147) │
│ at org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:816) │
│ at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:180) │
│ at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:235) │
│ at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49) │
│ at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:223) │
│ at org.postgresql.Driver.makeConnection(Driver.java:400) │
│ at org.postgresql.Driver.connect(Driver.java:259) │
│ ... 220 more

 

does Postgres JDBC driver support FIPS mode to connect to Postgresql database ?

 

Thanks,

 

James

 

 

 

 

pgsql-jdbc by date:

Previous
From: Dave Cramer
Date:
Subject: [pgjdbc/pgjdbc] 6398a9: bump gradle to version 3 to fix compile errors wit...
Next
From: Andrei Lurie
Date:
Subject: [pgjdbc/pgjdbc] 4c7a09: add alias to the generated query for clarity (#2553)