Re: [users@httpd] Apache with OpenSSL 3 compiled for FIPS - SSLFIPS invalid

[Joshua Smith]

That was it. Thanks Yann!

Josh

From: Yann Ylavic 
Date: Friday, October 21, 2022 at 5:26 AM
To: users@httpd.apache.org 
Subject: Re: [users@httpd] Apache with OpenSSL 3 compiled for FIPS - SSLFIPS 
invalid
On Fri, Oct 21, 2022 at 2:07 AM Joshua Smith  wrote:
>
> With that in mind, I’m confused why Apache still complains about not being 
> compiled for FIPS. What am I missing?

Possibly this change (which was overlooked for httpd-2.4.54 release):
https://github.com/apache/httpd/commit/8b800c1457aee40d871e07470c1a962bf3e25de3
Patching 2.4.54 with
https://github.com/apache/httpd/commit/8b800c1457aee40d871e07470c1a962bf3e25de3.patch
should work.


Regards;
Yann.

-
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Re: [users@httpd] Qualys scan reports B overall rating for a specific domain

[Walter Hop]

> I will appreciate it if someone can pitch in for my earlier post to this 
> mailing list and need guidance in this regard. I look forward to hearing from 
> you. Thanks in advance. 

I’m sorry if this has already been said earlier, cause I deleted a bunch of 
mails.

But this is a very good resource with configuration examples for getting an A+ 
on your Qualys SSL test: https://ssl-config.mozilla.org 


Kind regards,
Walter Hop