Is the latest neo4j FIPS compliant

[barnsie]

Hi,
looking to install the latest neo4j onto a FIPS enabled system

just wondering does neo4j support FIPS

thanks in advance
John

[michael_hunger]

Answer from our security team

There are 8 standards under the FIPS banner. While we are not currently working actively with those particular standards, we are implementing industry best practices for crypto and information protection through our work with ISO 27001. So while I don’t see a direct issue with running Neo4j on a FIPS enabled system though, it’s not tested extensively.

[barnsie]

thanks for the reply

[david_fauth]

John,

For the SSL piece of FIPS, you can use a NIST-certified third party OpenSSL cryptographic module and using this module as the only provider of cryptographic services. I've configured Neo4j to use the BoringSSL provider.

Reach out if you have any other questions.