Re: postgres-10 with FIPS

2020-12-09 Thread Joe Conway
On 12/9/20 4:51 AM, Aravindhan Krishnan wrote: > The paid version I had mentioned about was the paid OS (ubuntu) for FIPS > compliancy. I understand that postgres as is completely available for > open-source. > > Since we can't get the paid version of the OS to support FIPS compliancy the > idea

Re: postgres-10 with FIPS

2020-12-09 Thread Aravindhan Krishnan
Hi Magnus, The paid version I had mentioned about was the paid OS (ubuntu) for FIPS compliancy. I understand that postgres as is completely available for open-source. Since we can't get the paid version of the OS to support FIPS compliancy the idea was to build postgres against FIPS compliant SSL

Re: postgres-10 with FIPS

2020-12-09 Thread Magnus Hagander
On Wed, Dec 9, 2020 at 5:30 AM Aravindhan Krishnan wrote: > Hi Folks, > > Thanks for the responses. Since the underlying knob flip is a paid version > and we are a SaaS based service provider, this might not align well with > our requirement and so wanted to build postgres-10 against FIPS complia

Re: postgres-10 with FIPS

2020-12-08 Thread Aravindhan Krishnan
Hi Folks, Thanks for the responses. Since the underlying knob flip is a paid version and we are a SaaS based service provider, this might not align well with our requirement and so wanted to build postgres-10 against FIPS compliant ssl/crypto. The "pg_config" is of of great help in order to unders

Re: postgres-10 with FIPS

2020-12-08 Thread Tom Lane
Aravindhan Krishnan writes: > * Would it be possible to share the configure command used in building the > standard postgres package ? There is no "the standard" postgres package. There's a different one for every major platform or distro, and in some cases more than one available from different

Re: postgres-10 with FIPS

2020-12-08 Thread Aravindhan Krishnan
Hi Community, Can someone help me on the above request ? * Would it be possible to share the configure command used in building the standard postgres package ? * We would like to build a debian package post the make -- would checkinstall be the right tool for this purpose ? Regards, Aravindhan K

Re: postgres-10 with FIPS

2020-12-04 Thread Aravindhan Krishnan
Hi Michael, Thanks for the quick response. I will try this out. Would it be possible to share the configure command used in building the standard postgres package. There are quite a lot of knobs and we wanted to retain the same behaviour from postgres. I am assuming apart from this, I might need

Re: postgres-10 with FIPS

2020-12-03 Thread Michael Paquier
On Thu, Dec 03, 2020 at 05:57:04PM +0530, Aravindhan Krishnan wrote: > Since postgres is linked against openssl we wanted to make sure we build > postgres against the FIPS compliant openssl libraries. Does postgres > provide a FIPS debian package that can be used. If not it would be of great > help

postgres-10 with FIPS

2020-12-03 Thread Aravindhan Krishnan
Hi Community, In our org, we are using postgres-10 and was installed by adding the source to apt and downloading postgres on top of ubuntu (currently using ubuntu 20.04.1) . We wanted to go for FIPS compliance for which we need to use the FIPS compliant packages of all the libraries / packages we