We have a client which is asking about OpenSSL FIPS (Federal Information Processing Standard) 140-2 compliant support validated cryptography use. How do I check whether OpenSSL has FIPS complains i...

I am trying to compile my program in visual studio and I am getting a FIPS Cryptographic algorithms error. I have checked the registry key and it is set to false. Any suggestions?

OpenSSL: 3.0.8 Python: 3.9.16 I enabled FIPS using below script but FIPS functionality is not working when I use custom libcrypto path but working fine if I use default path. custom path:/tmp/fips_...

Python: 3.9.16 OpenSSL: 3.0.8 fips_ccode.c #include <stdio.h> #include <stdlib.h> #include <openssl/provider.h> #include "openssl/md5.h" int main(void) { OSSL_PROVID...

Context: I was reading multiple articles about making my golang app FIPS compliant (in other words, making my app use boringcrypto instead of the native golang crypto): https://kupczynski.info/pos...

I am investigating FIPS compliance for our platform. nginx is one of the components and we use nginx 1.15.1. I found the documentation about nginx plus being FIPS compliant. When NGINX Plus is exe...

We have some Java library performing AES and RSA encryptions (using javax.crypto.Cipher). A new requirement came in to make the code FIPS 140-2 compliant. Reading some articles what I understood is...

I'm trying to enable FIPS mode using SUNPKCS11 with NSS in Java 11. I got this exception java.security.NoSuchAlgorithmException: PKCS11 KeyStore not available. When I tried to enable FIPS in Java ...

Is there a way to determine from the .NET framework whether or not the FIPS policy is being enforced on the windows computer?

According to Python Cryptography library's documentation [1], it is possible to build a custom cryptography wheel with OpenSSL statically linked. I tried doing this with an OpenSSL installation bui...

I'm running into an issue with an ASP.NET 2.0 application. Our network folks just upped our security, and now I get the floowing error whenever I try to access the app: "This implementation is n...

I'm trying to set up a web application to work in an environment where the FIPSAlgorithmPolicy is set to 1 in the Windows registry (specifically, HKLM/SYSTEM/CurrentControlSet/Control/Lsa). When th...

Right now the only way I can get the RijndaelManaged algorithm to work on a computer with the Local Security Setting for FIPS turned on, is to disable it. It is a government computer, so I'm not su...

I am trying to implement the FIPS_mode and FIPS_mode_set functions in Python's ssl module since those are not present by default. A patch for Python 3.4 has already been submitted and rejected due ...

I am hoping to get some guidance on enabling openssl fips mode for nginx. So far I followed the openssl guide for enabling fips mode on the openssl. That part works well: # /usr/local/openssl/bin...

Can someone please specify the steps to enable FIPS on Postgres Database? I have googled but was not able to find anything concrete.

We moved to BC FIPS version 1.0.1 and since then RSA Key Helper hangs for extended periods of time (stack below). We had a similar issue in Linux that was solved by increasing entropy (urandom/hav...

Is it possible to ensure by a configuration parameter, that curl uses OpenSSL, and not NSS to retrieve https content? I need to ensure this, in order to enforce compliance with FIPS140-2, which RHE...

My project require to keep all data encrypted, so MSMQ needs to be encrypted too. But as it is known from the article (https://msdn.microsoft.com/en-us/library/ms704178(v=vs.85).aspx ) messages fro...

I want to disalbe fips in asp .net x64 application. In web.config I added <runtime> <enforceFIPSPolicy enabled = "false"> </runtime> I set debug to false. However my applica...

What Java Cryptography Extension (JCE) providers are FIPS 140-2 compliant? More specifically, does the Sun/Oracle provider qualify?

I am using .net 3.5 and I'm trying to make my app FIPS compliant.I don't use any of the non FIPS algorithms but I still get this error when I run it on the production server. This implementation...

The SSL / TLS handshake between a "Java 1.7 TLS 1.1 server" and a "Java 1.8 client" fails in my environment with the following exception on the server side: java.security.NoSuchAlgorithmExceptio...

I am working on a security related project and have to make sure it is under FIPS compliance. According to my understanding, FIPS compliance is compliance at hardware as well as software level. Cu...

I cross compiled the FIPS for armv7 using the instructions from http://opensslfoundation.com/testing/validation-2.0/platforms/ios/ I am having difficulties cross compiling openssl dependency on fi...