RE: [EXTERNAL] Re: Enabling FIPS for Tomcat
Thank you Mark! Will work on getting this added to the Wiki page. Would appreciate feedback from all to confirm accuracy/usefulness. Thanks, Amit -Original Message- From: Mark Thomas Sent: Tuesday, September 29, 2020 1:40 PM To: users@tomcat.apache.org Subject: [EXTERNAL] Re: Enabling FIPS for Tomcat On 29/09/2020 16:25, Amit Pande wrote: > Dear all, > > The link below documents how to enable FIPS (using Bouncy Castle) for Tomcat. > > https://github.com/amitlpande/tomcat-9-fips > > Kindly let me know your inputs if this needs any corrections, enhancements. > > Also, a request to Tomcat leads: It is possible for these steps to be > part of (extended) Tomcat documentation? Even if currently it uses > Bouncy Castle as FIPS JCA/JCE provider, with minor changes it would > work for any other provider too (e.g. CryptoComply for Java / CCJ from > Safelogic) You can always create a page in the wiki. Maybe "FAQ > Security > FIPS". You'll need to create an account and then ask (on this list is fine) for write access. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Enabling FIPS for Tomcat
On 29/09/2020 16:25, Amit Pande wrote: > Dear all, > > The link below documents how to enable FIPS (using Bouncy Castle) for Tomcat. > > https://github.com/amitlpande/tomcat-9-fips > > Kindly let me know your inputs if this needs any corrections, enhancements. > > Also, a request to Tomcat leads: It is possible for these steps to be part of > (extended) Tomcat documentation? Even if currently it uses Bouncy Castle as > FIPS JCA/JCE provider, with minor changes it would work for any other > provider too (e.g. CryptoComply for Java / CCJ from Safelogic) You can always create a page in the wiki. Maybe "FAQ > Security > FIPS". You'll need to create an account and then ask (on this list is fine) for write access. Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Enabling FIPS for Tomcat
Dear all, The link below documents how to enable FIPS (using Bouncy Castle) for Tomcat. https://github.com/amitlpande/tomcat-9-fips Kindly let me know your inputs if this needs any corrections, enhancements. Also, a request to Tomcat leads: It is possible for these steps to be part of (extended) Tomcat documentation? Even if currently it uses Bouncy Castle as FIPS JCA/JCE provider, with minor changes it would work for any other provider too (e.g. CryptoComply for Java / CCJ from Safelogic) Thanks, Amit
