Hi,
delivering a FIPS compliant software is way beyond our capacity. First
we have no workforce that can dedicate some time on checking we are FIPS
compliant.
The only thing we can eventually do is to use dependencies that are FIPS
complinat, like the BC one you are mentioning.
In any case, we are not in a position to properly state that we are
*officially* FIPS compliant.
Le 07/02/2025 à 11:30, Sooriyaa PR a écrit :
Dear Apache Directory Server Community,
I am currently using ApacheDS version 2.0.0.AM26 and would like to know if
there are any steps to make it FIPS compatible. Alternatively, is there an
existing version that already supports FIPS compliance?
Based on my understanding, making ApacheDS use LDAPS and updating the
BouncyCastle (BC) JAR should be sufficient to achieve FIPS compatibility. Could
you confirm if this approach is correct? If so, what would be the recommended
method to update the BouncyCastle JAR in ApacheDS?
I came across a related JIRA issue:
DIRSERVER-2363<https://issues.apache.org/jira/browse/DIRSERVER-2363>. Would
this be relevant to achieving FIPS compliance?
I appreciate any guidance or documentation you can provide.
Best regards,
Sooriyaa
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org
For additional commands, e-mail: dev-h...@directory.apache.org
