[Samba] Is samba FIPS compliant ? Can it be build with openssl ?

[Jeremy Allison]

On Tue, Oct 02, 2018 at 05:50:35PM +0000, Tompkins, Michael via samba wrote:
> I'm checking back in to see if samba is FIPS compliant, as in using FIPS compliant algorithms ? Can it be built with openssl, which is FIPS compliant ?  We're currently running 4.7.5. Please let me know.

FIPS certification is expensive and time-consuming,
and no Open Source project that I know of has ever
complied.

Having said that, individual vendors have gotten
FIPS certification for specific versions of their
product, Red Hat being one. As Red Hat ships by
default with Samba, I think we're probably *able*
to be FIPS certifiable, but you're going to have
to do the actual FIPS certification work yourself :-).

Cheers,

	Jeremy.