We want to use Apache Tomcat as part of an IA-enbled application being developed here at the Space and Naval Warfare System Center San Diego, but we are required by NSTISSP #11 to use products that have been (or are being) evaluated through the Common Criteria and/or National Information Assurance Partnership processes. Apache Tomcat is not on the lists of CC and NIAP evaluated products. Has not been able to determine whether it is currently being evaluated through CC or NIAP. Can anyone provide insight regarding Apache Tomcat's status with respect to NIAP/CC evaluation? If there is no plan to evaluate Apache Tomcat by itself, has it ever been a component of a CCEVS or NIAP evaluated system? John Yen 619-553-9404 619-888-0302mobile john.yen@xxxxxxxx -- View this message in context: http://www.nabble.com/Apache-Tomcat-Certification--tp15341215p15341215.html Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx