Re: [HACKERS] FIPS mode?

2017-06-24 Thread Curtis Ruck
SSLFIPS directive: http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslfips). On Sat, Jun 24, 2017 at 1:51 AM Tom Lane <t...@sss.pgh.pa.us> wrote: > Michael Paquier <michael.paqu...@gmail.com> writes: > > On Sat, Jun 24, 2017 at 12:56 PM, Curtis Ruck > > <curti

[HACKERS] FIPS mode?

2017-06-23 Thread Curtis Ruck
I've got a requirement for enabling FIPS support in our environment. Looking at postgresql's be-secure-openssl.c and mucking with it, it seems fairly straight forward to just add a few ifdefs and enable fips with a new configure flag and a new postgresql.conf configuration setting. If I clean

Re: [HACKERS] PostgreSQL Auditing

2016-02-02 Thread curtis . ruck
e" <j...@commandprompt.com> wrote: > On 02/02/2016 02:47 AM, José Luis Tallón wrote: > >> On 02/02/2016 02:05 AM, Curtis Ruck wrote: >>> [snip] >>> >>> P.S., do you know what sucks, having a highly performant PostGIS >>> database that

Re: [HACKERS] PostgreSQL Auditing

2016-02-02 Thread Curtis Ruck
Robert, This isn't wrong. I don't see anyone else trying to submit anything in reference to auditing. Just because there have been multiple implementations in the past, based on commit histories, there have only been a few that tried getting into core or contrib (that i can find in mailing list

[HACKERS] PostgreSQL Auditing

2016-02-01 Thread Curtis Ruck
So Auditing, it seems that some people want auditing (myself, David Steele, 2nd quadrant, and probably others). I personally love postgresql, but until it can meet my annoying compliance requirements, I can't leverage it fully as my organization spends more time on meeting compliance, than