Postgres in FIPS

From: M Sabin <postgres(at)sabes(dot)net>
To: pgsql-general(at)postgresql(dot)org
Subject: Postgres in FIPS
Date: 2011-01-11 21:03:28
Message-ID: AANLkTikTE70ZNQ69+tpsiQKJvBFCnbsBqOQn7-9QXCqf@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hello,

My organization is in the process of getting a FIPS certification. I was
wondering if anyone who has experience with getting their application FIPS
certified using postgres. I have read a little bit about this and saw that
you need to compile postgres manually using a FIPS capable version of
openssl.

However, I would like to know how you handled the startup self test of
postgres and how you handled errors in the crypto module.

I have started investigating compiling postgres using openssl-fips.
However, I run into issues when I try to run the make scripts using the
fipsld linker.

The error I get is:
fipsld -O2 -Wall -Wmissing-prototypes -Wpointer-arith
-Wdeclaration-after-statement -Wendif-labels -fno-strict-aliasing -fwrapv
-DDEF_PGPORT=5432 -I../../../src
/interfaces/libpq -I../../../src/include -D_GNU_SOURCE
-I/usr/local/ssl/fips/include -I/usr/local/include -c -o pg_ctl.o pg_ctl.c
fipsld -O2 -Wall -Wmissing-prototypes -Wpointer-arith
-Wdeclaration-after-statement -Wendif-labels -fno-strict-aliasing -fwrapv
pg_ctl.o -L../../../src/port -l pgport
-L../../../src/interfaces/libpq -lpq -L../../../src/port
-L/usr/local/ssl
/fips/lib -L/usr/local/lib -Wl,--as-needed -Wl,-rpath,'/usr/local/pgsql/lib'
-lpgport -lssl -lcrypto -lcrypt -ldl -lm -o pg_ctl
./pg_ctl: error while loading shared libraries: libpq.so.5: cannot open
shared object file: No such file or directory

Just as a FYI, I am running configure and make in the following manner:
> ./configure --with-includes=/usr/local/ssl/fips/include:/usr/local/include
--with-libraries=/usr/local/ssl/fips/lib:/usr/local/lib --enable-shared
-with-openssl --without-readline --without-zlib

> make CC=fipsld FIPSLD_CC=gcc

Thanks for any help

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Vick Khera 2011-01-11 21:40:57 Re: Mixed client_encoding database: what to do with..
Previous Message Ing. Yunior Mesa Reyes 2011-01-11 20:30:38 Oferta de Entrenamientos en el marco del Cuarto PGDay Latinoamericano.