I have Ubuntu 12.04.5 LTS server. Mainly I am running an SFTP server (OpenSSH_5.9), Vsftpd server (vsFTPd 2.3.5) and an IBM Message queue. My client want this server to be FIPS 140-2 certified, about which I have only a limited knowledge.
I have used a utility called modutil for enabling FIPS using below commands.
mkdir -p /root/.pki/nssdb certutil -N -d /root/.pki/nssdb modutil -fips true -dbdir /root/.pki/nssdb
But I don't think this will enable FIPS system wide. I think this will enable FIPS for that particular nssdb located at
/root/.pki/nssdb. I need at least my SSH & FTP server to be FIPS complaint. How can I achieve this?
I know that Red Hat supports FIPS and here is their documentation about enabling FIPS
Does Ubuntu support something like this?