Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Hello server warriors!

I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache does not recognize the SSLFIPS directive...and fails with the following error:

Invalid command 'SSLFIPS', perhaps misspelled or defined by a module not included in the server configuration

I installed mod_ssl from yum. This is a subscribed RHEL6 system...and is wired into RHN.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Ok...

So after much searching and some time spent with some professional support staff, turns out mod_ssl is not "approved" for use on a fips 140-2 enabled system.

In order to have SSL, you must leverage mod_nss instead.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.