OpenSSL 1.0.2 EOL and new FIPS-validated crypto module

Salman Baset salman.a.baset at gmail.com
Mon Oct 21 11:11:23 UTC 2019


Hello everyone,

I was wondering if there is any update on getting a new FIPS-validated
module for OpenSSL by the end of this year (before EOL of 1.0.2), as was
mentioned in this blog post:
https://www.openssl.org/blog/blog/2018/09/25/fips/

According to this email, the new FIPS module is dependent on OpenSSL 3.0,
whose release timing is not certain yet.
https://mta.openssl.org/pipermail/openssl-users/2019-February/009836.html

I will appreciate if someone can provide an update on the new FIPS timeline
as that will help folks who are looking to depend on OpenSSL's
FIPS-validated modules in the next 6-9 months or so.

Lastly, is there any chance of extending the EOL date of OpenSSL 1.0.2 till
the new FIPS module/OpenSSL 3.0 becomes available?

Thanks
Salman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20191021/55ef5f31/attachment.html>


More information about the openssl-users mailing list