[SOLVED] CentOS is FIPS compliant

cisco_dod · Post by **cisco_dod** » 2012/11/29 09:24:34

Hello,

RHEL 6.2 can be made FIPS compliant.
Similar to that is CentOS 6.2 also FIPS compliant.If yes what is the method to make it FIPS compliant.

Thanks
Gayatri

Post by **toracat** » 2012/11/30 01:19:42

I'd suggest you try following the procedure in this upstream documentation [url=https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sect-Security_Guide-Federal_Standards_And_Regulations-Federal_Information_Processing_Standard.html]Enabling FIPS Mode[/url]. Then check with this command:

[code]
$ cat /proc/sys/crypto/fips_enabled
1
[/code]

cisco_dod · Post by **cisco_dod** » 2012/11/30 08:34:47

Thanks!!! its working

Post by **toracat** » 2012/11/30 16:16:27

Thanks for reporting back. Glad to hear it worked. Marking this thread [SOLVED] for posterity.

ibroot · Post by **ibroot** » 2014/03/27 21:08:43

Not sure how this is resolved. FIPS 140-2 validated means that the specific product is listed in http://csrc.nist.gov/groups/STM/cmvp/do ... al-all.htm. CentOS is not validated.

Post by **TrevorH** » 2014/03/27 22:15:13

For something that isn't validated, I see an awful lot of mentions of the string "CentOS" in that page you linked to.

srikchak · Post by **srikchak** » 2014/04/08 12:02:35

Hi,

Can we assume that using the OpenSSL coming with the Cent OS 6.x (6.4/6.5) has already bundled with the fips module and when enabled can operate/work in the FIPS Mode. By Using the Open SSL coming with the CentOS can we go for the FIPS validation of our application.

Or is it mandatory to rebuild the OpenSSL with FIPS module and update it inorder to make it FIPS Compliant as Cent OS is not validated for FIPS Compliant.

Thansk,
Srikanth

jitu.sri · Post by **jitu.sri** » 2015/01/08 10:41:14

Hi Srikanth
I have same question as yours, "Openssl that comes with the Cent OS6.5 can be made to work in FIPS mode?" or do we need to compile and build it? I still see your question is open, Were you able to enable FIPS with existing opesssl?

Thanks

avij · Post by **avij** » 2015/01/20 10:47:53

No, you do not need to rebuild OpenSSL with FIPS module.

You can enable FIPS mode in CentOS by following the documentation link that toracat provided above. CentOS provides the same technical FIPS functionality as in Red Hat when configured the same way.

Whether some product is validated to FIPS 140-2 is a legal question, not a functional question. Consult your legal adviser. Do not expect getting correct answers to your legal questions from random users on some discussion forum.

CentOS