[19929] in Kerberos_V5_Development
Re: FIPS support for Kerberos
daemon@ATHENA.MIT.EDU (Robbie Harwood)
Mon May 6 11:16:59 2019
From: Robbie Harwood <rharwood@redhat.com>
To: Simo Sorce <simo@redhat.com>, Abhidnya Joshi <abhidnyachirmule@gmail.com>
In-Reply-To: <c1881a1a6ad86fcf6e1064f435eaee913341cce0.camel@redhat.com>
Date: Mon, 6 May 2019 11:16:48 -0400
Message-ID: <jlg4l67mx3z.fsf@redhat.com>
MIME-Version: 1.0
Cc: krbdev@mit.edu
Content-Type: multipart/mixed; boundary="===============8121262421673924862=="
Errors-To: krbdev-bounces@mit.edu
--===============8121262421673924862==
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512;
protocol="application/pgp-signature"
--=-=-=
Content-Type: text/plain
Simo Sorce <simo@redhat.com> writes:
> On Fri, 2019-05-03 at 23:21 +0530, Abhidnya Joshi wrote:
>
>> Does Kerberos available in RHEL enterprise edition claims as FIPS
>> compliant?
>
> No, up to the latest public RHEL release (7.6) we do not claim FIPS
> compliance for our distribution of Kerberos, yet.
I have made it work in FIPS mode, but be careful - working in FIPS mode
isn't the same as being compliant. Be aware of your exact needs etc.
Thanks,
--Robbie
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=WKL1
-----END PGP SIGNATURE-----
--=-=-=--
--===============8121262421673924862==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--===============8121262421673924862==--
