[Swan-dev] FIPS Behavior Question

[Wewegama, Kavinda]

Hi folks,

When FIPS is enabled, how does it affect Libreswan behavior besides enforcing certain cryptographic properties/restrictions?

The reason I ask is because I am noticing child/IPsec SAs getting unsynchronized between tunnel endpoints if FIPS is enabled and SELinux Enforcing is turned on. In the past, I didn't have issues with either FIPS by itself or with SELinux Enforcing by itself, but the combination isn't working well.

Thanks.

-Kavinda
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20210427/e578e556/attachment.html>