RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

From: "McDermott, Becky" <bmcderm(at)sandia(dot)gov>
To: Rob Sargent <robjsargent(at)gmail(dot)com>, "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: RE: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?
Date: 2022-03-21 23:16:44
Message-ID: BY3PR09MB8627F2D4EB41C56C50E09D75C8169@BY3PR09MB8627.namprd09.prod.outlook.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

I am a bit out of my element. I don't even know where PDKDF2 is coming from.

I just confirmed that I can connect from one pod with psql installed to the postgres pod with a straight up "psql -h posgtgresql-gms -p 5432 -d mydb -U gms_read_only" and then I can run queries just fine. So there is something on the Java side that is not connecting correctly.

Thank you everyone. This was helpful.

-----Original Message-----
From: Rob Sargent <robjsargent(at)gmail(dot)com>
Sent: Monday, March 21, 2022 5:08 PM
To: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?

On 3/21/22 17:02, McDermott, Becky wrote:
> Thank you. I should deploying a very simple container that has psql installed and make sure I can connect in a simple way with a username/password. If this works, then the database is fine and it would definitely point to a java issue.
>
> Thanks!

I liked your original theory:
That stack trace message is rather adamant.  Is there any indication that PBKDF2 and SCRAM-SHA-256 should play nice?

Caused by: org.postgresql.util.PSQLException: Something unusual has occurred to cause the driver to fail. Please report this exception.
at org.postgresql.Driver.connect(Driver.java:277) ~[postgresql-42.2.5.jar:42.2.5]
at com.mchange.v2.c3p0.DriverManagerDataSource.getConnection(DriverManagerDataSource.java:175) ~[c3p0-0.9.5.5.jar:0.9.5.5]
at com.mchange.v2.c3p0.WrapperConnectionPoolDataSource.getPooledConnection(WrapperConnectionPoolDataSource.java:220) ~[c3p0-0.9.5.5.jar:0.9.5.5]
at com.mchange.v2.c3p0.WrapperConnectionPoolDataSource.getPooledConnection(WrapperConnectionPoolDataSource.java:206) ~[c3p0-0.9.5.5.jar:0.9.5.5]
at com.mchange.v2.c3p0.impl.C3P0PooledConnectionPool$1PooledConnectionResourcePoolManager.acquireResource(C3P0PooledConnectionPool.java:203) ~[c3p0-0.9.5.5.jar:0.9.5.5]
at com.mchange.v2.resourcepool.BasicResourcePool.doAcquire(BasicResourcePool.java:1176) ~[c3p0-0.9.5.5.jar:0.9.5.5]
at com.mchange.v2.resourcepool.BasicResourcePool.doAcquireAndDecrementPendingAcquiresWithinLockOnSuccess(BasicResourcePool.java:1163) ~[c3p0-0.9.5.5.jar:0.9.5.5]
at com.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread.run(ThreadPoolAsynchronousRunner.java:696) ~[mchange-commons-java-0.2.19.jar:0.2.19]
Caused by: java.lang.RuntimeException: Unsupported PBKDF2 for SCRAM-SHA-256

In response to

Browse pgsql-general by date

  From Date Subject
Next Message PALAYRET Jacques 2022-03-22 09:45:55 PostgreSQL : bug (ou not) in CTE Common Table Expressions or Subqueries in the FROM Clause
Previous Message Rob Sargent 2022-03-21 23:08:00 Re: [EXTERNAL] Re: Can you install/run postgresql on a FIPS enabled host?