You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by Sooriyaa PR <sp...@manh.com> on 2025/02/07 10:30:47 UTC
Enquiry on FIPS Compatibility for ApacheDS 2.0.0.AM26 version
Dear Apache Directory Server Community,
I am currently using ApacheDS version 2.0.0.AM26 and would like to know if there are any steps to make it FIPS compatible. Alternatively, is there an existing version that already supports FIPS compliance?
Based on my understanding, making ApacheDS use LDAPS and updating the BouncyCastle (BC) JAR should be sufficient to achieve FIPS compatibility. Could you confirm if this approach is correct? If so, what would be the recommended method to update the BouncyCastle JAR in ApacheDS?
I came across a related JIRA issue: DIRSERVER-2363<https://issues.apache.org/jira/browse/DIRSERVER-2363>. Would this be relevant to achieving FIPS compliance?
I appreciate any guidance or documentation you can provide.
Best regards,
Sooriyaa
Re: Enquiry on FIPS Compatibility for ApacheDS 2.0.0.AM26 version
Posted by Emmanuel Lecharny <el...@gmail.com>.
Hi,
delivering a FIPS compliant software is way beyond our capacity. First
we have no workforce that can dedicate some time on checking we are FIPS
compliant.
The only thing we can eventually do is to use dependencies that are FIPS
complinat, like the BC one you are mentioning.
In any case, we are not in a position to properly state that we are
*officially* FIPS compliant.
Le 07/02/2025 à 11:30, Sooriyaa PR a écrit :
> Dear Apache Directory Server Community,
>
> I am currently using ApacheDS version 2.0.0.AM26 and would like to know if there are any steps to make it FIPS compatible. Alternatively, is there an existing version that already supports FIPS compliance?
>
> Based on my understanding, making ApacheDS use LDAPS and updating the BouncyCastle (BC) JAR should be sufficient to achieve FIPS compatibility. Could you confirm if this approach is correct? If so, what would be the recommended method to update the BouncyCastle JAR in ApacheDS?
>
> I came across a related JIRA issue: DIRSERVER-2363<https://issues.apache.org/jira/browse/DIRSERVER-2363>. Would this be relevant to achieving FIPS compliance?
>
> I appreciate any guidance or documentation you can provide.
>
> Best regards,
> Sooriyaa
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org