Search code examples
opensslopenldapfips

Making OpenLDAP FIPS 140-2 Validated


I'm trying to make my LDAP application FIPS 140-2 validated. It uses OpenLDAP, so I think I should first try to make OPENLDAP FIPS 140-2 validated (correct me if i am wrong). Is there any patch that does this for OpenLDAP.C

Can any one provide me some references that will help me do this?


Solution

  • OpenLDAP uses OpenSSL. It is OpenSSL that you need to comply with FIPS 140-2, if it doesn't already. Nothing to do with OpenLDAP per we at all. Quite possibly this is just a configuration issue.