Using a FIPS 140 Enabled System in Oracle® Solaris 11.2

Exit Print View

Updated: August 2014

Apache Web Server as a FIPS 140 Consumer

The Apache Web Server V2.2 installs as the package pkg:/web/server/apache-22. The web server uses the OpenSSL library and can use its PKCS #11 engine option, which is the Cryptographic Framework.

You can use either the Cryptographic Framework (pktool gencert command) or the OpenSSL (openssl -newkey command) to generate the web server certificate. Certificate authentication is handled through OpenSSL by the PKCS #11 engine. The engine is validated for FIPS 140.

For the configuration steps, see Example of Enabling Two Applications in FIPS 140 Mode on an Oracle Solaris System.