Page MenuHomeFreeBSD
Feed Search

Jul 25 2024

nat_picone.it added a comment to D44897: libcrypto: conditionally build the fips and legacy providers.

The only FIPS-validated modules are 3.0.0, 3.0.8, and 3.0.9.
Building a different FIPS module will not result in a valid FIPS configuration.
The base should also include a valid FIPS provider to produce a valid FIPS configuration.
To clarify this, you can build OpenSSL 3.2 and use the OpenSSL 3.0.9 FIPS provider.
Instructions on how to do this can be found here: Installing the FIPS provider and using it with the latest release.

Jul 25 2024, 1:39 PM