<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I think it’s worth pointing out that OpenSSL is itself a non-profit and that FIPS validations cost a significant amount of money.<div class=""><br class=""></div><div class="">Until about a year ago, there was also a notable absence of FIPS sponsors.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Pauli<br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">-- <br class="">Dr Paul Dale | Cryptographer | Network Security & Encryption <br class="">Phone +61 7 3031 7217<br class="">Oracle Australia</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 8 Jul 2019, at 7:18 pm, Jakob Bohm via openssl-users <<a href="mailto:openssl-users@openssl.org" class="">openssl-users@openssl.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 08/07/2019 10:12, Dr Paul Dale wrote:<br class=""><blockquote type="cite" class="">I have to disagree with the “decision not to make a FIPS module for the current 1.1.x series” comment. Technically, this is true. More practically, 3.0 is intended to be source compatible with 1.1.x. Thus far, nothing should be broken in this respect.<br class=""><br class=""></blockquote>The key word is "intended".<br class=""><br class=""><blockquote type="cite" class="">If support for 1.0.2 is required beyond the end of this year, it is available: <a href="https://www.openssl.org/support/contracts.html" class="">https://www.openssl.org/support/contracts.html</a><br class=""><br class=""></blockquote>I am unsure if this is an affordable route for all affected users<br class="">and distributions (especially non-profit OS distributions).<br class=""><br class=""><blockquote type="cite" class=""><br class="">I’d also be interested to know what is wrong with the policy page?<br class=""><br class=""></blockquote><br class="">Only that it states the policy of stopping 1.0.2 support at end of<br class="">2019, which would be fine if a FIPS-capable replacement had been<br class="">ready by now (as is fortunately the case for non-FIPS).<br class=""><br class="">Enjoy<br class=""><br class="">Jakob<br class="">-- <br class="">Jakob Bohm, CIO, Partner, WiseMo A/S. <a href="https://www.wisemo.com" class="">https://www.wisemo.com</a><br class="">Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10<br class="">This public discussion message is non-binding and may contain errors.<br class="">WiseMo - Remote Service Management for PCs, Phones and Embedded<br class=""><br class=""></div></div></blockquote></div><br class=""></div></body></html>