Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
We have a requirement to run all of our applications on FIPS enabled hosts. Is it possible to install and successfully run postgreql on a FIPS enabled host? We currently run postgres ina container that is executing on a FIPS enabled host with the setting: password_encryption = scram-sha-256

Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread Adrian Klaver
On 3/21/22 15:15, McDermott, Becky wrote: We have a requirement to run all of our applications on FIPS enabled hosts.  Is it possible to install and successfully run postgreql on a FIPS enabled host? We currently run postgres ina  container that is executing on a FIPS enabled host with the se

Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread Tom Lane
"McDermott, Becky" writes: > We have a requirement to run all of our applications on FIPS enabled hosts. > Is it possible to install and successfully run postgreql on a FIPS enabled > host? We do test that case from time to time, but not regularly. > We currently run postgres ina container t

RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
Version 12.7 -Original Message- From: Adrian Klaver Sent: Monday, March 21, 2022 4:25 PM To: McDermott, Becky ; pgsql-general@lists.postgresql.org Subject: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host? On 3/21/22 15:15, McDermott, Becky wrote: > We have a require

Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread Adrian Klaver
On 3/21/22 15:43, McDermott, Becky wrote: Version 12.7 And the JDBC version? -Original Message- From: Adrian Klaver Sent: Monday, March 21, 2022 4:25 PM To: McDermott, Becky ; pgsql-general@lists.postgresql.org Subject: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled

RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
So the logs for one of our Java servers that is attempting to connect to postgres is showing: Notice that the last "Caused by" is showing the "Unsupported PBKDF2 for SCRAM-SHA-256". We are also using Hibernate so perhaps the underlying problem is there? java.sql.SQLException: Connections coul

RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
I will have to find out the JDBC version. None of the containers will start (because of the database connection error) so I have to track down that version with one of our developers (I am on the platform team so not so well versed in the actual code). Will get back with that version. -Or

RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
It looks like jdbc-1.15.2.jar -Original Message- From: Adrian Klaver Sent: Monday, March 21, 2022 4:46 PM To: McDermott, Becky ; pgsql-general@lists.postgresql.org Subject: Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host? On 3/21/22 15:43, McDermott, Becky wrot

Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread Rob Sargent
On 3/21/22 16:55, McDermott, Becky wrote: It looks like jdbc-1.15.2.jar Named in the stack trace: postgresql-42.2.5.jar

Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread Tom Lane
"McDermott, Becky" writes: > So the logs for one of our Java servers that is attempting to connect to > postgres is showing: > Notice that the last "Caused by" is showing the "Unsupported PBKDF2 for > SCRAM-SHA-256". We are also using Hibernate so perhaps the underlying > problem is there? Th

RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
Thank you. I should deploying a very simple container that has psql installed and make sure I can connect in a simple way with a username/password. If this works, then the database is fine and it would definitely point to a java issue. Thanks! -Original Message- From: Tom Lane Sent:

Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread Rob Sargent
On 3/21/22 17:02, McDermott, Becky wrote: Thank you. I should deploying a very simple container that has psql installed and make sure I can connect in a simple way with a username/password. If this works, then the database is fine and it would definitely point to a java issue. Thanks! I li

RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

2022-03-21 Thread McDermott, Becky
I am a bit out of my element. I don't even know where PDKDF2 is coming from. I just confirmed that I can connect from one pod with psql installed to the postgres pod with a straight up "psql -h posgtgresql-gms -p 5432 -d mydb -U gms_read_only" and then I can run queries just fine. So there is