Re: Replace current implementations in crypt() and gen_salt() to OpenSSL

Поиск
Список
Период
Сортировка
От Joe Conway
Тема Re: Replace current implementations in crypt() and gen_salt() to OpenSSL
Дата
Msg-id 7c2b71ae-766c-4412-99bb-00bd165b8338@joeconway.com
обсуждение исходный текст
Ответ на Re: Replace current implementations in crypt() and gen_salt() to OpenSSL  (Daniel Gustafsson <daniel@yesql.se>)
Ответы Re: Replace current implementations in crypt() and gen_salt() to OpenSSL
Список pgsql-hackers
Дерево обсуждения 
On 12/4/24 09:33, Daniel Gustafsson wrote:
> since OpenSSL 1.1.1 cannot operate in FIPS mode.

I don't think that is correct. The RHEL 8 openssl which was FIPS 140-2 
validated is 1.1.1k. See:


https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4642.pdf

-- 
Joe Conway
PostgreSQL Contributors Team
RDS Open Source Databases
Amazon Web Services: https://aws.amazon.com

В списке pgsql-hackers по дате отправления: