<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">The FIPS module source code can’t be changed without losing validation.<div class=""><br class=""></div><div class=""><br class=""></div><div class="">Pauli<br class=""><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">-- <br class="">Dr Paul Dale | Distinguished Architect | Cryptographic Foundations <br class="">Phone +61 7 3031 7217<br class="">Oracle Australia</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 22 Oct 2019, at 11:46 pm, Salman Baset <<a href="mailto:salman.a.baset@gmail.com" class="">salman.a.baset@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="">Thank you very much. This is helpful. Will the support also include any updates to the FIPS compatible part, or is that out of scope because any update essentially invalidates existing FIPS cert for potential use?</div><div class=""><br class=""></div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Oct 21, 2019 at 11:56 AM Dr Paul Dale <<a href="mailto:paul.dale@oracle.com" class="">paul.dale@oracle.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;" class="">The EOL date for OpenSSL 1.0.2 will not be extended.<div class=""><br class=""></div><div class="">It is possible to purchase premium level support which will provide 1.0.2 updates beyond its normal end of life. See: <a href="https://www.openssl.org/support/contracts.html#premium" target="_blank" class="">https://www.openssl.org/support/contracts.html#premium</a><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Pauli<br class=""><div class="">
<div dir="auto" style="overflow-wrap: break-word;" class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class="">-- <br class="">Dr Paul Dale | Distinguished Architect | Cryptographic Foundations <br class="">Phone +61 7 3031 7217<br class="">Oracle Australia</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class=""><br class=""></div><br class=""></div><br class="">
</div>
<div class=""><br class=""><blockquote type="cite" class=""><div class="">On 21 Oct 2019, at 9:11 pm, Salman Baset <<a href="mailto:salman.a.baset@gmail.com" target="_blank" class="">salman.a.baset@gmail.com</a>> wrote:</div><br class=""><div class=""><div dir="ltr" class=""><div class="">Hello everyone,</div><div class=""><br class=""></div><div class="">I was wondering if there is any update on getting a new FIPS-validated module for OpenSSL by the end of this year (before EOL of 1.0.2), as was mentioned in this blog post:<br class=""></div><div class=""><a href="https://www.openssl.org/blog/blog/2018/09/25/fips/" target="_blank" class="">https://www.openssl.org/blog/blog/2018/09/25/fips/</a></div><div class=""><br class=""></div><div class="">According to this email, the new FIPS module is dependent on OpenSSL 3.0, whose release timing is not certain yet.<br class=""></div><div class=""><a href="https://mta.openssl.org/pipermail/openssl-users/2019-February/009836.html" target="_blank" class="">https://mta.openssl.org/pipermail/openssl-users/2019-February/009836.html</a></div><div class=""><br class=""></div><div class="">I will appreciate if someone can provide an update on the new FIPS timeline as that will help folks who are looking to depend on OpenSSL's FIPS-validated modules in the next 6-9 months or so.</div><div class=""><br class=""></div><div class="">Lastly, is there any chance of extending the EOL date of OpenSSL 1.0.2 till the new FIPS module/OpenSSL 3.0 becomes available?<br class=""></div><div class=""><br class=""></div><div class="">Thanks</div><div class="">Salman<br class=""></div></div>
</div></blockquote></div><br class=""></div></div></div></blockquote></div>
</div></blockquote></div><br class=""></div></body></html>