Re: New buildfarm animals with FIPS mode enabled

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
Cc: Daniel Gustafsson <daniel(at)yesql(dot)se>, pgsql-hackers(at)lists(dot)postgresql(dot)org, buildfarm(at)enterprisedb(dot)com
Subject: Re: New buildfarm animals with FIPS mode enabled
Date: 2025-02-14 22:44:40
Message-ID: 3913498.1739573080@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com> writes:
> I'm not buildfarm@, but these animals have now been stopped until we
> get them figured out. Sorry -- and thanks for the ping Tom!

Thanks for that. Just to be clear, I think it'd be great to run
those RHEL9 animals on v17 and later. I'm only questioning whether
it's worth the work to back-patch the regression changes to older
branches, and even more whether we'd learn anything by supporting
OpenSSL 1.x's variant spelling of the error messages.

Back-patching to make OpenSSL 3 green on all current branches would
at least be a one-time effort. The other thing would entail a new
set of variant expected-files that we'd have to maintain into the
future, so I'm feeling much more dubious about that one.

regards, tom lane

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Thomas Munro 2025-02-14 22:54:17 Re: Confine vacuum skip logic to lazy_scan_skip
Previous Message Jacob Champion 2025-02-14 22:28:15 Re: New buildfarm animals with FIPS mode enabled