Re: Inquiry about FIPS Certification for net-snmp's Crypto Module

Wes Hardaker via Net-snmp-coders <[email protected]> Wed, 09 Aug 2023 12:44:52 -0700
Newsgroups gmane.network.net-snmp.devel
Message-ID <[email protected]>
MOUHOUNE Samir <[email protected]> writes:

> I am writing to inquire whether your crypto module is FIPS
> certified.

Hi Samir,

We do not have FIPS certification for the net-snmp source-code, nor are
there any plans to do so.

Having said that, one of the motivations behind the "internal" option
that can be passed to the --with-openssl flag for configure is that the
version we included supposedly is FIPS certificate, which may meet your
requirements.  It is, unfortunately, an older version of openssl and
given its age, it may be wise for organizations to instead try to link
against a different openssl that has received certification instead.
-- 
Wes Hardaker
Please mail all replies to [email protected]