Apache Web Server as a FIPS 140 Consumer

The Apache Web Server V2.2 installs as the package pkg:/web/server/apache-22. The web server uses the OpenSSL library and can use its PKCS #11 engine option, which is the Cryptographic Framework.

You can use either the Cryptographic Framework (pktool gencert command) or the OpenSSL (openssl -newkey command) to generate the web server certificate. Certificate authentication is handled through OpenSSL by the PKCS #11 engine. The engine is validated for FIPS 140.

For the configuration steps, see Example of Enabling Two Applications in FIPS 140 Mode on an Oracle Solaris System.

See also:

• openssl (1openssl) man page

• openssl(5) man page

• How to Configure an Apache 2.2 Web Server to Use the SSL Kernel Proxy in Securing the Network in Oracle Solaris 11.2

• ksslcfg(1M) man page