Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Hello server warriors!

I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache does not recognize the SSLFIPS directive...and fails with the following error:

Invalid command 'SSLFIPS', perhaps misspelled or defined by a module not included in the server configuration

I installed mod_ssl from yum. This is a subscribed RHEL6 system...and is wired into RHN.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Ok...

So after much searching and some time spent with some professional support staff, turns out mod_ssl is not "approved" for use on a fips 140-2 enabled system.

In order to have SSL, you must leverage mod_nss instead.

share|improve this answer
    
How to use in Redhat 4/5 system? or how to compile apache to use mod_nss –  Satish Apr 22 at 19:43
    
I'm assuming you mean RHEL 4 or RHEL 5? I would think mod_nss would be in the base repos for at least RHEL 5. –  Mike Broyles Apr 23 at 0:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.