RPM Repository not FIPS compliant

From: Mikkel Kruse Johnsen <mikkel(at)xmedicus(dot)com>
To: "pgsql-pkg-yum(at)postgresql(dot)org" <pgsql-pkg-yum(at)postgresql(dot)org>
Subject: RPM Repository not FIPS compliant
Date: 2023-02-23 18:43:51
Message-ID: 0d5a1052c8c110cf3b1c46dce23ca95e49d67aa3.camel@xmedicus.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-pkg-yum


When will the this config be FIPS compliant ??????

---
[pgdg15]
name=PostgreSQL 15 for RHEL / Rocky $releasever - $basearch
baseurl=https://download.postgresql.org/pub/repos/yum/15/redhat/rhel-$releasever-$basearch
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG
repo_gpgcheck = 1
---

The "RPM-GPG-KEY-PGDG" is not FIPS compliant and you need to generate
new with no MD5 or SHA1.

Please update, this is really hurting the security.

--
Med Venlig Hilsen / Kind Regards

Mikkel Kruse Johnsen
Adm. Dir., Medejer

XMedicus Systems ApS
Gladsaxevej 363
2860 Søborg

Telefon: +45 8883 6000
Direkte: +45 8883 6001
Support: +45 8883 6009
e-mail: mikkel(at)xmedicus(dot)com
web: https://www.xmedicus.com

Browse pgsql-pkg-yum by date

  From Date Subject
Next Message Uytterhoeven Patrik 2023-03-20 09:10:14 Postgres common repo is missing geos310-3.10.3-1.rhel8.x86_64
Previous Message Chuan Hua Zhao 2023-02-02 03:39:18 About postgresql extension pgnodemx