-
Story
-
Resolution: Done
-
Major
-
None
-
None
-
5
-
False
-
-
False
-
Committed
-
?
-
OSPRH-787 - FIPS Support in OSO 18.0
-
?
-
?
-
-
-
OSPPlanningCycle2, OSPPlanningCycle3
-
Storage; Manila
There is currently a list of non-fips compliant libraries [1] that the security team has been working on. There might be more libraries that are currently not on the list, but as the effort moves on, the list will grow up. We need to ensure that Manila is not using any non FIPS compliant library. We can look at the list, but we also must look at the code to ensure that we are not using any library that will break under FIPS.
[1] https://etherpad.opendev.org/p/zed-ptg-fips-goal-compliance-audit