Take the 2-minute tour ×

I'm hoping that I'm not asking the wrong question or repeating another question. i m trying to make my ldap application fips 140-2 compliant. It uses OpenLDAP , so i think i should first try to make OPENLDAP FIPS 140-2 compliant(correct me if i am wrong). Is there any patch that does this for openldap.Can any one provide me some references that will help me do this. Your help is really appreciated.

share|improve this question
possible duplicate of Hardenning LDAP through FIPS –  EJP Mar 26 '12 at 21:42
You are not only repeating another question, you are repeating your own question. –  EJP Mar 26 '12 at 21:43
Because i want the answer to it. it is more specific than the other one. i want open ldap to be fips compliant, not padl this time. –  user1286706 Mar 27 '12 at 15:44
add comment

1 Answer

OpenLDAP uses OpenSSL. It is OpenSSL that you need to comply with FIPS 140-2, if it doesn't already. Nothing to do with OpenLDAP per we at all. Quite possibly this is just a configuration issue.

share|improve this answer
I have a fips compiled openssl ready. How should i link it to openldap? So that it uses the openssl-fips library. Is it automatically linked to the openssl-fips library by default or do i need to change any thing in openldap? –  user1286706 Mar 29 '12 at 19:42
@user1286706 It's platform-dependent, but if OpenSSL is being used as a shared library by OpenLDAP just make sure it uses the right version. –  EJP Apr 1 '12 at 3:57
add comment

Your Answer


