Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hello server warriors!

I have a situation where I need to make my RHEL6 system FIPS140-2 compliant...which includes apache and mod_ssl. However, after I make the server run in "fips 140 mode" Apache does not recognize the SSLFIPS directive...and fails with the following error:

Invalid command 'SSLFIPS', perhaps misspelled or defined by a module not included in the server configuration

I installed mod_ssl from yum. This is a subscribed RHEL6 system...and is wired into RHN.

share|improve this question
up vote 2 down vote accepted


So after much searching and some time spent with some professional support staff, turns out mod_ssl is not "approved" for use on a fips 140-2 enabled system.

In order to have SSL, you must leverage mod_nss instead.

share|improve this answer
How to use in Redhat 4/5 system? or how to compile apache to use mod_nss – Satish Apr 22 '14 at 19:43
I'm assuming you mean RHEL 4 or RHEL 5? I would think mod_nss would be in the base repos for at least RHEL 5. – Mike Broyles Apr 23 '14 at 0:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.