Re: FIPS module for OpenSSL 1.1.1x

[Dr Paul Dale <paul.dale@xxxxxxxxxx>]

In answer to the second question: there will *never* be a FIPS module for any 1.1.1 OpenSSL version.

The next version of OpenSSL will be 3.0.0 and it will support FIPS.

There will be a gap in FIPS support between the end of life of 1.0.2 and the validation of 3.0.0.

Pauli

-- 
Dr Paul Dale | Cryptographer | Network Security & Encryption 
Phone +61 7 3031 7217
Oracle Australia

On 16 May 2019, at 8:29 pm, shiva kumar <shivakumar2696@xxxxxxxxx> wrote:

Hi,

I wanted to move from OpenSSL 1.0.2r to 1.1.1b. I have some doubts they are

1) If I upgrade to 1.1.1b will it cause any problem to other applications? which uses openssl for communications. ( say apache http server ).

2) can I expect FIPS module for 1.1.1b as well ?

3) since OpenSSL 1.1.1b doesn't have FIPS will this affect any other application ?

Thanks and regards

Shivakumar S