News for hackers. Stuff that matters.

A comment on CentOS Linux 7 will reach EOL on Sunday. Parent comment

Re:CentOS Linux 7 will reach EOL on Sunday by Twirrim on Monday June 24, 2024 @09:29AM (#40775814)
Why is it a problem with FedRAMP? CentOS 8 is FIPS certified, has STIG profiles etc.
[ Parent | on HN ]
Re:CentOS Linux 7 will reach EOL on Sunday by p_l on Monday June 24, 2024 @09:43AM (#40775966)
Last I checked, CentOS Stream is not FIPS certified, and CentOS 8 is already past EOL, which makes it not allowed for FedRAMP.

And IIRC CentOS8 FIPS certificate was taken out by Red Hat (wouldn't have had to implement our own FIPS handling on CentOS7 if not for that move).

[ Parent | on HN ]
Re:CentOS Linux 7 will reach EOL on Sunday by tiberious726 on Monday June 24, 2024 @10:51AM (#40776753)
Centos was never FIPS certified https://csrc.nist.gov/projects/cryptographic-module-validati...
[ Parent | on HN ]
Re:CentOS Linux 7 will reach EOL on Sunday by p_l on Monday June 24, 2024 @10:57AM (#40776822)
There was a time when RHEL FIPS certificate also applied to CentOS, and one of my former $DAYJOBs depended on that for a long time. Then Red Hat pulled the cert, and later there was a mad scramble to get rid of CentOS because of the EOL :)
[ Parent | on HN ]
Re:CentOS Linux 7 will reach EOL on Sunday by tiberious726 on Monday June 24, 2024 @11:33AM (#40777297)
Oh wow! Do happen to have a link to the old cert? I /really/ looked for a way for us to stay on centos when we started doing this kind of stuff.
[ Parent | on HN ]
Re:CentOS Linux 7 will reach EOL on Sunday by Twirrim on Monday June 24, 2024 @02:20PM (#40779154)
Doh, sorry. Forgot it only hit Red Hat 8 (and derivatives).
[ Parent | on HN ]