Hi
I am trying to set up stunnel with FIPS 140-2 compliance. I found some discussion of this on this mailing list from many years ago, but I'm not sure how much of that is still relevant today.
I am running Ubuntu Pro 18.04, with FIPS mode (including the userspace modules: https://security-certs.docs.ubuntu.com/en/fips). If I simply `apt-get install stunnel4`, I can create a config with `fips = yes`, and when I start it up, I see this line logged:
2021.06.23 15:45:24 LOG5[ui]: FIPS mode enabled
Does this mean I am all set, without needing to compile anything from source? In this message (from almost a decade ago), it sounds like this might be the validation I need:
BTW: "fips" option is only available when stunnel is built with FIPS support.
FIPS mode is also clearly logged on startup
https://www.stunnel.org/pipermail/stunnel-users/2012-November/003963.html
Or do I need to build stunnel from scratch, using my local openssl distribution?
Thanks!