| From: | sutyak <sutyak(at)proton(dot)me> |
|---|---|
| To: | Daniel Gustafsson <daniel(at)yesql(dot)se> |
| Cc: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org> |
| Subject: | Re: PostgreSQL 18 FIPS mode in Windows |
| Date: | 2026-09-24 21:58:08 |
| Message-ID: | O-bQJYWYn6Ej8NtTeVVq8MRhOaCWabX50W8FLgRXtkwijv8fMNj6dxqr6Yp2G7xOc8HwCVoqqFZOqWswnHRSyWaj1x-JvLBBbFduxX57qBA=@proton.me |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
That is something I should have considered. Do you know the default PostgeSQL OpenSSL path? If not I can pull the source and see what it is there.
Mark Sutyak
Sent from Proton Mail for Android.
-------- Original Message --------
On Thursday, 09/24/26 at 17:49 Daniel Gustafsson <daniel(at)yesql(dot)se> wrote:
> On 24 Sep 2026, at 22:54, sutyak <sutyak(at)proton(dot)me> wrote:
>
> I forgot to mention I did ensure FIPS is the only option enabled in OpenSSL. Verified by running openssl.exe list-providers.
Is that using the same configuration as the OpenSSL used by Postgres? Is it
even the same OpenSSL used by Postgres? If you are using the Windows Installer
from EDB I believe they are using a special hardcoded openssldir where the
config must reside.
--
Daniel Gustafsson
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2026-09-24 22:08:18 | Re: PostgreSQL 18 FIPS mode in Windows |
| Previous Message | Daniel Gustafsson | 2026-09-24 21:48:49 | Re: PostgreSQL 18 FIPS mode in Windows |