Crypto / FIPS support

[whgibbo]

Is there any docuementation on the crypto being used and if it is FIPS 140-2/3 compliant ?

Thanks

[whgibbo]

Any thoughts on this ?

[gaul]

I don't know much about FIPS certification but S3Proxy uses Java and you should investigate enable its FIPS mode. Note that the S3 API baked in a few uses of MD5 but these are not used for any kind of security purpose just for ETAG responses.

https://docs.oracle.com/middleware/11119/wls/SECMG/fips.htm