You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@geode.apache.org by Darin Petty <dp...@vmware.com> on 2015/11/30 18:38:31 UTC

FIPS-140 compliance

I'm working on a project pursuing FIPS-140 compliance, and we use Gemfire internally with SSL enabled.
Is there any support in Gemfire or Geode for a FIPS mode?

Thank you,
Darin Petty

Darin Petty I Staff Engineer I vmware I

RE: FIPS-140 compliance

Posted by Darin Petty <dp...@vmware.com>.
That is the correct NIST document.  Thank you Vincent for the reply.

From: Vincent Ford [mailto:vford@pivotal.io]
Sent: Monday, November 30, 2015 10:50 AM
To: user@geode.incubator.apache.org
Subject: Re: FIPS-140 compliance

Hi,

I assume you are referencing the following NIST document on cryptographic compliance.

http://www.nist.gov/customcf/get_pdf.cfm?pub_id=902003<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.nist.gov_customcf_get-5Fpdf.cfm-3Fpub-5Fid-3D902003&d=BQMFaQ&c=Sqcl0Ez6M0X8aeM67LKIiDJAXVeAw-YihVMNtXt-uEs&r=apjAY6Jcjo8421Zp6p_78TvbHSNOmSZb2A2WNaLBbYU&m=SNg62lFQlhbTzJk2_whVeDYeTYQTMTJuCcAVm69Gnok&s=hy9hei-U55UtqBJDsicCDkJpee52rr2Ba7rO6-DVPUI&e=>

Currently Geode doesn't directly support these requirements, it may overlap in many areas and meet many of the requirements without strict compliance. But geode currently doesn't directly test or support a FIPS-140 mode.

I would recommend you file a Jira as a starting point with the Apache Geode team.


Vince Ford
GemFire Sustenance Engineering
Beaverton, OR USA
503-533-3726 (office)
http://www.pivotal.io<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.pivotal.io&d=BQMFaQ&c=Sqcl0Ez6M0X8aeM67LKIiDJAXVeAw-YihVMNtXt-uEs&r=apjAY6Jcjo8421Zp6p_78TvbHSNOmSZb2A2WNaLBbYU&m=SNg62lFQlhbTzJk2_whVeDYeTYQTMTJuCcAVm69Gnok&s=QqTU-ByCFFFRn2v2YIUMdZNBsRW4kxAZcdo_HQh7chY&e=>
Open Source Project Geode https://geode.incubator.apache.org/<https://urldefense.proofpoint.com/v2/url?u=https-3A__network.pivotal.io_products_project-2Dgeode&d=BQMFaQ&c=Sqcl0Ez6M0X8aeM67LKIiDJAXVeAw-YihVMNtXt-uEs&r=apjAY6Jcjo8421Zp6p_78TvbHSNOmSZb2A2WNaLBbYU&m=SNg62lFQlhbTzJk2_whVeDYeTYQTMTJuCcAVm69Gnok&s=1_dMvfYSxKv7NqrQajU0JG5l6o2gy9x_WUIVPAeGa3Q&e=>

On Mon, Nov 30, 2015 at 9:38 AM, Darin Petty <dp...@vmware.com>> wrote:
I’m working on a project pursuing FIPS-140 compliance, and we use Gemfire internally with SSL enabled.
Is there any support in Gemfire or Geode for a FIPS mode?

Thank you,
Darin Petty

Darin Petty I Staff Engineer I vmware I

Re: FIPS-140 compliance

Posted by Vincent Ford <vf...@pivotal.io>.
Hi,

I assume you are referencing the following NIST document on cryptographic
compliance.

http://www.nist.gov/customcf/get_pdf.cfm?pub_id=902003

Currently Geode doesn't directly support these requirements, it may overlap
in many areas and meet many of the requirements without strict compliance.
But geode currently doesn't directly test or support a FIPS-140 mode.

I would recommend you file a Jira as a starting point with the Apache Geode
team.


*Vince Ford*
GemFire Sustenance Engineering
Beaverton, OR USA
503-533-3726 (office)
http://www.pivotal.io
Open Source Project Geode https://geode.incubator.apache.org/
<https://network.pivotal.io/products/project-geode>

On Mon, Nov 30, 2015 at 9:38 AM, Darin Petty <dp...@vmware.com> wrote:

> I’m working on a project pursuing FIPS-140 compliance, and we use Gemfire
> internally with SSL enabled.
>
> Is there any support in Gemfire or Geode for a FIPS mode?
>
>
>
> Thank you,
>
> Darin Petty
>
>
>
> *Darin Petty I Staff Engineer I vm*ware* I *
>
>
>
>
>