[GENERAL] postgresql 9.3.10, FIPS mode and DRBG issues.

2016-04-04 Thread Rodney Lott
->status pointer, which points to a "static DRBG_CTX ossl_dctx" structure, is initialize to 1 in the main process. It appears that this initialization doesn't get propagated to other backends or the SSL transaction above. If any of the developers have some insight into this, I w

Re: [GENERAL] postgresql 9.3.10, FIPS mode and DRBG issues.

2016-04-04 Thread Rodney Lott
> > So, my question is this: In FIPS mode, what would cause the random > > number generation to not initialize? > > I remember that Red Hat's version of "FIPS mode" involved crypto > features (including RNGs) just refusing to work in modes deemed > inadequately secure. So my guess is that psql is