← Back to team overview

maria-discuss team mailing list archive

Re: mariadb + FIPS

 

There is some FIPS documentation at:
https://mariadb.com/kb/en/library/tls-and-cryptography-libraries-used-by-mariadb/#fips-certification

On 2019/08/30 00:10, Captain Wiggum wrote:
Hi All,

I have searched the archives and forums and cannot find an answer to this question. Does mariadb support FIPS, and if so, how or where is a document about this. I use mariadb 10.3.17 with OpenSSL 1.0.2 with FIPS enabled, all built from source.
In FIPS mode, SHA1 is disallowed by openssl, as required by FIPS.
However, when I search the mariadb code, SHA1 is used in many places.
How can I update mariadb to use sha256, without a ton of recoding?
Any tips appreciated.

--Capt


References