SPIKE: FIPS Images
Work with @zacharytburke to obtains NIST contacts and work through their concerns with our FIPs compliance. Specifically this image was mentioned https://repo1.dso.mil/dsop/opensource/apache/tomcat9-openjdk11
-
Learn everything there is to know about FIPs -
Determine if IB images are FIPs compliant -
Set up discussion with NIST and determine what we need to do (or provide) to be FIPs "capable."
FIPs "compliance" is assessed and provided by NIST so we should discuss if we can get "certified" as "compliant."
Edited by Douglas Radoye