On Thu, 17 Mar 2016, Paul D Rotter wrote:

> I am working on FIPS-compliance for our product which uses curl/openssl.
> I've built and verified the FIPS-compliant OpenSSL, but the one area where
> we are still receiving FIPS errors is in the curl NTLM authentication
> functions:
>  
> These functions use a single DES cipher which is not FIPS-approved.

NTLM requires DES. You can't do NTLM without it so if DES is forbidded you
need to switch off NTLM.

-- 
  / daniel.haxx.se

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2016-03-17