Re: [EXTERNAL] Re: Java client connection problem on FIPS enabled hosts (with password_encryption = scram-sha-256)

From: Rob Sargent <robjsargent(at)gmail(dot)com>
To: "McDermott, Becky" <bmcderm(at)sandia(dot)gov>, "pgsql-jdbc(at)lists(dot)postgresql(dot)org" <pgsql-jdbc(at)lists(dot)postgresql(dot)org>
Subject: Re: [EXTERNAL] Re: Java client connection problem on FIPS enabled hosts (with password_encryption = scram-sha-256)
Date: 2022-03-22 16:42:07
Message-ID: 2f32386c-01dd-380a-7814-e44c65525a36@gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

On 3/22/22 10:36, McDermott, Becky wrote:
>
> Probably not right away.  Getting this fixed/working will not get
> prioritized on the development side for a few weeks.  I was tasked
> with confirming that we don’t have a platform side problem which I did
> by confirming I can connect to postgresql using psql on a FIPS enabled
> host.
>
> I was hoping that maybe there was something simple like the version of
> postgres or the jdbc driver but it sounds like it may be more than that.
>
> Once our developers are tasked with actively looking into this, I will
> re-post.  I do know that we were using MD5 and switched to
> scram-sha-256 fairly recently (maybe 6 months ago).  But, up until
> really recently, we were not running on a FIPS enabled host.  Since
> FIPS is now enabled, the cryptography enforcement is actually
> occurring and we are seeing this problem.
>
> Thank you,
>
> Becky
>
>
Well there's still a chance someone on the list may have useful input. 
If/when you return, please keep in mind that this list prefers
"bottom-posting", i.e. (trimming and) adding your comments at the
bottom, or where more appropriate adding comments in-line.

In response to

Browse pgsql-jdbc by date

  From Date Subject
Next Message Michael Paquier 2022-03-22 22:49:52 Re: Java client connection problem on FIPS enabled hosts (with password_encryption = scram-sha-256)
Previous Message McDermott, Becky 2022-03-22 16:36:21 RE: [EXTERNAL] Re: Java client connection problem on FIPS enabled hosts (with password_encryption = scram-sha-256)