Dear all,

As you might be aware, the FIPS 140-2 was sunset in Sep 2026 and the FIPS 140-3 
is the current replacement.

I have updated the github page describing the details steps to enable FIPS 
140-3 support for Tomcat.

GitHub - amitlpande/tomcat-9-fips ยท 
GitHub<https://github.com/amitlpande/tomcat-9-fips>

Would really appreciate your feedback here.

If it passes all the due review process, wonder if this content can be put on 
to Tomcat's security page.

Side note: I am looking at FIPS 
204<https://csrc.nist.gov/news/2024/postquantum-cryptography-fips-approved> 
support for Tomcat and will share the details soon.

Thanks,
Amit

Reply via email to