Re: [openssl-users] new FIPS module

2016-09-29 Thread Steve Marquess
On 09/29/2016 12:40 PM, Troy Smoke wrote: > I am in the position of evaluating products that have (or claim to have) > implemented the OpenSSL FIPS module. > > I would like to be able to be able to run a command or run the FIPS > self-test on command, for the purpose of verifying if OpenSSL is >

Re: [openssl-users] new FIPS module

2016-09-29 Thread Troy Smoke
I am in the position of evaluating products that have (or claim to have) implemented the OpenSSL FIPS module. I would like to be able to be able to run a command or run the FIPS self-test on command, for the purpose of verifying if OpenSSL is operating in FIPS mode. This may not be important for

Re: [openssl-users] new FIPS module

2016-09-28 Thread Steve Marquess
On 09/27/2016 10:57 AM, Zeke Evans wrote: >> ... > > The fixed base address requirement causes problems for large Windows > x86 applications and there isn't a great work around. It isn't clear > to me if item 2 " Support compilation in various forms" will address > this or not. An option to

Re: [openssl-users] new FIPS module

2016-09-27 Thread Zeke Evans
> As always, if you don't care about FIPS 140 then count yourself lucky and > move on. > > Work on the new FIPS module has so far taken a backseat to higher priority > topics like the 1.1 release and security vulnerabilities, but we should start > to > make some progress soon. I've put together

Re: [openssl-users] new FIPS module

2016-09-27 Thread Jakob Bohm
On 27/09/2016 15:41, Steve Marquess wrote: As always, if you don't care about FIPS 140 then count yourself lucky and move on. Work on the new FIPS module has so far taken a backseat to higher priority topics like the 1.1 release and security vulnerabilities, but we should start to make some

[openssl-users] new FIPS module

2016-09-27 Thread Steve Marquess
As always, if you don't care about FIPS 140 then count yourself lucky and move on. Work on the new FIPS module has so far taken a backseat to higher priority topics like the 1.1 release and security vulnerabilities, but we should start to make some progress soon. I've put together a rough wiki