Re: Postgre SQL SHA-256 Compliance

From: Albe Laurenz <laurenz(dot)albe(at)wien(dot)gv(dot)at>
To: "Anthony Burden *EXTERN*" <anthony(dot)d(dot)burden(dot)ctr(at)mail(dot)mil>, "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: Re: Postgre SQL SHA-256 Compliance
Date: 2014-09-22 14:42:58
Message-ID: A737B7A37273E048B164557ADEF4A58B17D4D452@ntex2010i.host.magwien.gv.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Anthony Burden wrote:
> validate some software with you to
> ensure that all our installed PostgreSQL software meets SHA-256 compliance.
> There is basically two things we are looking for:
>
> 1) Identify all COTS software purchased as part of scheduled and budgeted
> technology refreshes and upgrades must be SHA-256 compliant.
>
> 2) All DOD information systems that have been upgraded or are upgrading to
> support SHA-256 compliance must continue to maintain backwards compatibility
> with DOD's current SHA-1 credentials.
>
> All the software we are using are:
> PostgreSQL 8.2 8.2
>
> Can you confirm that your software is SHA-256 Compliant?

If you mean whether a SSL database connection can use SHA-256 or not,
that depends on the OpenSSL library your PostgreSQL uses.
If your OpenSSL version supports SHA-256, so does PostgreSQL.

Yours,
Laurenz Albe

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Paul Jungwirth 2014-09-22 14:46:41 Re: Postgre SQL SHA-256 Compliance
Previous Message Anthony Burden 2014-09-22 14:40:37 Re: Postgre SQL SHA-256 Compliance (UNCLASSIFIED)