<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">The EOL date for OpenSSL 1.0.2 will not be extended.<div class=""><br class=""></div><div class="">It is possible to purchase premium level support which will provide 1.0.2 updates beyond its normal end of life. See: <a href="https://www.openssl.org/support/contracts.html#premium" class="">https://www.openssl.org/support/contracts.html#premium</a><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Pauli<br class=""><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">-- <br class="">Dr Paul Dale | Distinguished Architect | Cryptographic Foundations <br class="">Phone +61 7 3031 7217<br class="">Oracle Australia</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 21 Oct 2019, at 9:11 pm, Salman Baset <<a href="mailto:salman.a.baset@gmail.com" class="">salman.a.baset@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="">Hello everyone,</div><div class=""><br class=""></div><div class="">I was wondering if there is any update on getting a new FIPS-validated module for OpenSSL by the end of this year (before EOL of 1.0.2), as was mentioned in this blog post:<br class=""></div><div class=""><a href="https://www.openssl.org/blog/blog/2018/09/25/fips/" class="">https://www.openssl.org/blog/blog/2018/09/25/fips/</a></div><div class=""><br class=""></div><div class="">According to this email, the new FIPS module is dependent on OpenSSL 3.0, whose release timing is not certain yet.<br class=""></div><div class=""><a href="https://mta.openssl.org/pipermail/openssl-users/2019-February/009836.html" class="">https://mta.openssl.org/pipermail/openssl-users/2019-February/009836.html</a></div><div class=""><br class=""></div><div class="">I will appreciate if someone can provide an update on the new FIPS timeline as that will help folks who are looking to depend on OpenSSL's FIPS-validated modules in the next 6-9 months or so.</div><div class=""><br class=""></div><div class="">Lastly, is there any chance of extending the EOL date of OpenSSL 1.0.2 till the new FIPS module/OpenSSL 3.0 becomes available?<br class=""></div><div class=""><br class=""></div><div class="">Thanks</div><div class="">Salman<br class=""></div></div>
</div></blockquote></div><br class=""></div></div></body></html>