FIPS 2.0: Heart Bleed

2014-04-10 Thread Jason Todd
Just to verify, heart bleed doesn't look like it effects the fipscanister. I can just recompile openssl 1.0.1c with the no heart beat option and my current canister and still retain FIPS certification.

Re: FIPS 2.0: Heart Bleed

2014-04-10 Thread ag@gmail
Yes, you are correct. -ag -- sent via 100% recycled electrons from my mobile command center. On Apr 10, 2014, at 5:54 AM, Jason Todd ja...@bluntstick.com wrote: Just to verify, heart bleed doesn't look like it effects the fipscanister. I can just recompile openssl 1.0.1c with the no heart

Re: FIPS 2.0: Heart Bleed

2014-04-10 Thread Jason Todd
One other quick question. Is it possible to use the fipscanister from 1.0.1c with 1.0.1g and maintain compliance? Assuming that even compiles On Thu, Apr 10, 2014 at 9:32 AM, ag@gmail amarendra.godb...@gmail.comwrote: Yes, you are correct. -ag -- sent via 100% recycled electrons from my

Re: FIPS 2.0: Heart Bleed

2014-04-10 Thread Steve Marquess
On 04/10/2014 11:36 AM, Jason Todd wrote: One other quick question. Is it possible to use the fipscanister from 1.0.1c with 1.0.1g and maintain compliance? Assuming that even compiles fipscanister is not from 1.0.1 anything; it is from the OpenSSL FIPS Object Module 2.0, i.e. one of the