tcnative FIPS Mode with opensssl

[Timothy Resh <mr...@gmail.com>]

I'm building an installer for Tomcat and all our webapps.  I now have to
use the TOMCAT 9 STIGS (latest) from the NIST.GOV site.

Where can I download a tcnative.dll that supports FIPSMode, and which
OpenSSL library version is it using?

Re: tcnative FIPS Mode with opensssl

[Mark Thomas <ma...@apache.org>]

On 06/12/2025 20:29, Timothy Resh wrote:
> I'm building an installer for Tomcat and all our webapps.  I now have to
> use the TOMCAT 9 STIGS (latest) from the NIST.GOV site.
> 
> Where can I download a tcnative.dll that supports FIPSMode,

https://tomcat.apache.org/download-native.cgi

> and which OpenSSL library version is it using?

That is listed on the download page.

You'll probably also want to read the last few lines of this:

https://github.com/apache/tomcat-native/blob/main/native/BUILDING

and

look for "FIPSMode" on this page

https://tomcat.apache.org/tomcat-9.0-doc/config/listeners.html#APR_Lifecycle_Listener_-_org.apache.catalina.core.AprLifecycleListener

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org