Re: [GENERAL] postgresql 9.3.10, FIPS mode and DRBG issues.

2016-04-04 Thread Rodney Lott
> > So, my question is this: In FIPS mode, what would cause the random > > number generation to not initialize? > > I remember that Red Hat's version of "FIPS mode" involved crypto > features (including RNGs) just refusing to work in modes deemed > inadequately secure. So my guess is that psql is

Re: [GENERAL] postgresql 9.3.10, FIPS mode and DRBG issues.

2016-04-04 Thread Tom Lane
Rodney Lott writes: > So, my question is this: In FIPS mode, what would cause the random > number generation to not initialize? I remember that Red Hat's version of "FIPS mode" involved crypto features (including RNGs) just refusing to work in modes deemed inadequately secure. So my guess is tha

[GENERAL] postgresql 9.3.10, FIPS mode and DRBG issues.

2016-04-04 Thread Rodney Lott
Hi, there. First, my particulars: * Ubuntu Trusty build and runtime environment * PostgreSQL 9.3.10 Ubuntu source code * Using a FIPS enabled version of OpenSSL (i.e. 1.0.1p version of the library and 2.0.9 of the FIPS canister source code) * I think this is pr