Re: ecdh support causes unnecessary roundtrips

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Andres Freund <andres(at)anarazel(dot)de>, Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>, Marko Kreen <markokr(at)gmail(dot)com>, Adrian Klaver <adrian(dot)klaver(at)gmail(dot)com>, Peter Eisentraut <peter_e(at)gmx(dot)net>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>
Subject: Re: ecdh support causes unnecessary roundtrips
Date: 2026-02-20 15:51:03
Message-ID: 1239A91C-E849-4087-A93E-CBC67E9B61FF@yesql.se
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On 20 Feb 2026, at 15:58, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:

> and then people wanting to test on FIPS platforms could just add
> -DPG_FIPS_COMPLIANT to their build recipes.

I don't think we will gain much testing that way. My proposal is to ensure
that the tests always pass with FIPS enabled coupled with a patch, which Bilal
is currently working on, to switch one of the CI jobs to use a FIPS enabled
OpenSSL so that we get ongoing testing of such configurations.

--
Daniel Gustafsson

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message KAZAR Ayoub 2026-02-20 15:53:14 Re: Unexpectedly exposed COPY option: convert_selectively
Previous Message Álvaro Herrera 2026-02-20 15:48:40 Re: Show comments in \dRp+, \dRs+, and \dX+ psql meta-commands