Hi, I have asked this question in earlier post also and I would repeat. can I know that DTLS in 1.0.1 supports FIPS ? If not, do we have plans to support FIPS in future and if possible timeframe ?
We are working with one custmomer who wanted over DTLS based application but with FIPS support but they want to know whether it would support FIPS. --NIlesh. ----- Original Message ----- From: "Michael Tüxen" <[email protected]> To: [email protected] Sent: Tuesday, February 15, 2011 12:48:26 AM GMT -08:00 US/Canada Pacific Subject: Re: DTLS Hearbeat and FIPS On Feb 15, 2011, at 2:16 AM, Nilesh Vaghela wrote: > Hi, > 1. On the web I have see some king of patch for heartbeat for DTLS and also > there is some draft also. > But in Openssl 0.9.8 and 1.0.0 there is no such support. I grepped in the > sources. Any plans to add the support in future ? Hi Nilesh, I think you are referring to the ID http://tools.ietf.org/html/draft-ietf-tls-dtls-heartbeat-01 and to the patch available at http://sctp.fh-muenster.de/dtls-patches.html We have not submitted the patch to the OpenSSL bug tracker since we wanted to wait for some number assignment from IANA. Once the numbers have been assigned, we'll submit the patch and hope that it will be included in OpenSSL. But I think DTLS in 0.9.8 is broken anyway, so it does not make sense to integrate that feature in 0.9.8. I guess it will be only in 1.0.1. Best regards Michael > > Can some one guide me how to get such a feature in OpenSSL ? Or any other > suggestions as to how to implement alternatively. > > 2. For us it is very important that we have FIPS support in Application. In > 0.9.8 TLS we had FIPS. > Also release notes states that FIPS support is there. But do we have FIPS for > DTLS ? > > --Nilesh. > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
