Hello community.
I have FIPS mode enabled on RHEL 9.2 (see details below). According to this article https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/security_hardening/using-th... the Cipher algorithm RC4 should not be enabled, however when I run a test Java app it successfully executes the encryption on RC4. I have verified that in NNS audit logs, which shows a call to RC4 Cipher. If I understand the article correcly the RC4 should be blocked in FIPS mode. Am I right? If not then should I expect RC4 (and other non-approved algoritms) to work on FIPS mode? Any help appreciated. Thank you.
See test details below.
FIPS mode verification:
$ fips-mode-setup --check
FIPS mode is enabled.
$ cat /proc/sys/crypto/fips_enabled
1
update-crypto-policies --show
FIPS
