File: fips.txt

package info (click to toggle)
certmonger 0.75.14-3
  • links: PTS, VCS
  • area: main
  • in suites: jessie, jessie-kfreebsd
  • size: 8,540 kB
  • ctags: 2,176
  • sloc: ansic: 41,340; sh: 9,551; makefile: 528; python: 207; xml: 190; sed: 16
file content (13 lines) | stat: -rw-r--r-- 549 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
Notes on running in FIPS mode:

* All NSS databases need PINs, typically UTF-8 values of 7-255 characters
  in length, composed of at members of least three of these classes:
  * Upper-case ASCII character (unless it's the first character)
  * Lower-case ASCII character
  * Digit (unless it's the last character)
  * Other ASCII character
  * Other character

* Attempts to generate keys of certain sizes less than allowed by the
  underlying crypto libraries will fail.  The daemon will attempt to retry
  using its compile-time default key size.