I have previously been compiling my own FIPS-compliant PostgreSQL and OpenSSL
in Windows for FIPS compliance, but the documentation for 18 makes it sound
like it is ready out of the box, and it would certainly be nice to just grab
the latest off the shelf installer and use it.
The steps I have already taken are:
- Install PostgreSQL 18.6 windows-x64
- Install OpenSSL 3.5.8 with FIPS Provider 3.1.2
- Enable pgcrypto extension via pgAdmin
- set builtin_crypto_enabled to 'fips'
- Executing SELECT fips_mode(); always returns false.
- Verified FIPS is not being enforced by executing SELECT encode(digest('test',
'md5'), 'hex'); and it always returns a value.
What am I missing? Thank you,
Mark Sutyak
