Fips 140-2 mode for the opensearch

niraj_shr · June 19, 2021, 1:42am

Is there a way to enable the FIPS compliance mode in OpenSearch? It also needs to have FIPS 140-2 enabled JVM. If there is guidance somewhere can you point it to the documentation? I would like to start testing it. I don’t see any mention of the fips on the security plugin Github repo. Please help!

Thanks

TerryQ · January 23, 2023, 11:42am

We are also interested in this. I see Make bouncycastle dependency abstracted · Issue #1500 · opensearch-project/security · GitHub has been triaged - does this mean it has been added to the roadmap?

Any information around FIPS compliance would be greatly appreciated.

Topic		Replies	Views
Opensearch STIG Security configure	2	331	February 7, 2023
OpenSearch 1.2.2 version still showing log4j Vulnerability findings Security cve , security-issue	13	945	January 10, 2022
Does CVE-2021-44228 impact OpenSearch General Feedback cve	9	1513	December 20, 2021
Log4j2 vulnerability in OpenSearch Security discuss , cve , security-issue	72	9394	January 30, 2022
Log4j issue - CVE-2021-44832 Security discuss , cve , security-issue	16	1242	February 10, 2022

Fips 140-2 mode for the opensearch

Related Topics