DRBD uses openssl or gnutls?

[ShreyBansal22]

Hi, I have doubt is DRBD FIPS compliant? As DRBD uses openSSL to generate certificate but for tcp encyption consumes tlshd user land library which is dependent on GNU-TLS. Can anyone confirm what is the actual thing.

Regards, Shrey [email protected]

[WanzenBug]

To answer your questions:

• The DRBD kernel module does not do any cryptography, it instead just enables "Kernel TLS offload". If that is FIPS compliant depends on your kernel. I believe RedHat kernels are generally certified in that regard.
• tlshd does the TLS handshake, and uses GnuTLS internally. So that again depends on the FIPS compliance of your GnuTLS version. Again, I believe RedHat certified it for their distributions.

So no, we do not use OpenSSL and we should be FIPS compliant provided your OS is FIPS compliant.