I am in the position of evaluating products that have (or claim to have) implemented the OpenSSL FIPS module. I would like to be able to be able to run a command or run the FIPS self-test on command, for the purpose of verifying if OpenSSL is operating in FIPS mode. This may not be important for most users, but I would consider it of vital importance from a testing perspective. This is also assuming that such a command/procedure would be allowed under the FIPS certification. Thanks, zoddoz >As always, if you don't care about FIPS 140 then count yourself lucky and move >on. > >Work on the new FIPS module has so far taken a backseat to higher priority >topics like the 1.1 release and security vulnerabilities, but we should start to >make some progress soon. I've put together a rough wiki page outlining some >goals for the new FIPS module: > >Caution-https://wiki.openssl.org/index.php/FIPS_module_3.0 > >Within the very tight constraints of schedule, resources, and what is permitted >by FIPS 140, we want this FIPS module to be as widely useful as possible. > >If we've omitted anything of vital importance please speak up. > >-Steve M. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160929/e644bb10/attachment.html>
