RE: RE: [users@httpd] How to check whether apache support FIPS 140-2

2011-05-24 Thread Geoff Millikan
> I thought that FIPS is within mod_ssl, right? Doubt it: http://en.wikipedia.org/wiki/OpenSSL#FIPS_140-2_compliance - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/use

Re: RE: [users@httpd] How to check whether apache support FIPS 140-2

2011-05-23 Thread Petr Hracek
I thought that FIPS is within mod_ssl, right? Is it necessary to rebuild apache2 or is it enought to rebuild openssl with FIPS support? It means that flag SSLFIPS is directly part of apache2 as source code? Best regards Petr Dne 23.5.2011 21:07 "Geoff Millikan" napsal(a): > Maybe this? > > "If h

RE: [users@httpd] How to check whether apache support FIPS 140-2

2011-05-23 Thread Geoff Millikan
Maybe this? "If httpd was compiled against an SSL library which did not support the FIPS_mode flag, SSLFIPS on will fail." http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslfips - The official User-To-User support forum of

[users@httpd] How to check whether apache support FIPS 140-2

2011-05-23 Thread Petr Hracek
Dear users, I have turn on SSLFIPS on in my apache2 but it returns me following: Invalid command 'SSLFIPS', perhaps misspelled or defined by a module not included in the server configuration Do you know how to check whether apache2 or openssl is build-up with support of FIPS 140-2. Thank you in