Re: Is PG CE is FIPS Aware? - Mailing list pgsql-admin

From Imran Haider
Subject Re: Is PG CE is FIPS Aware?
Date
Msg-id f35c335c-5b39-4307-8761-c29811488a19@Spark
Whole thread Raw
In response to Re: Is PG CE is FIPS Aware?  (pramod kg <pramod11287@gmail.com>)
List pgsql-admin
https://www.stigviewer.com/stig/postgresql_9.x/

Regards,
Imran Haider
On 27 Jan 2022, 11:18 +0530, pramod kg <pramod11287@gmail.com>, wrote:
Thanks Tom for your quick response.

I executed query. Got output.

postgres=# SELECT md5('foo');
               md5
----------------------------------
 acbd18db4cc2f85cedef654fccc4a4d8
(1 row)


Do we have official documentation or any blogs which guides us to make PG installation FIPS Compliant? Also, is it achievable via RPM based installation? Or do we need to compile libraries? 






On Thu, Jan 27, 2022 at 11:02 AM Tom Lane <tgl@sss.pgh.pa.us> wrote:
pramod kg <pramod11287@gmail.com> writes:
> How to determine whether PG installed in a server is FIPS aware or not(FIPS
> 140-2 compliant)? We are doing RPM based installation.

If "SELECT md5('foo')" fails, then FIPS restrictions are active.

                        regards, tom lane

pgsql-admin by date:

Previous
From: pramod kg
Date:
Subject: Re: Is PG CE is FIPS Aware?
Next
From: Tom Lane
Date:
Subject: Re: Is PG CE is FIPS Aware?