Re: FIPS 2.0: Heart Bleed

2014-04-10 Thread Steve Marquess
On 04/10/2014 11:36 AM, Jason Todd wrote: > One other quick question. Is it possible to use the fipscanister from > 1.0.1c with 1.0.1g and maintain compliance? Assuming that even compiles fipscanister is not "from" 1.0.1 anything; it is from the OpenSSL FIPS Object Module 2.0, i.e. one of the open

Re: FIPS 2.0: Heart Bleed

2014-04-10 Thread Jason Todd
One other quick question. Is it possible to use the fipscanister from 1.0.1c with 1.0.1g and maintain compliance? Assuming that even compiles On Thu, Apr 10, 2014 at 9:32 AM, ag@gmail wrote: > Yes, you are correct. > > -ag > > -- > sent via 100% recycled electrons from my mobile command center.

Re: FIPS 2.0: Heart Bleed

2014-04-10 Thread ag@gmail
Yes, you are correct. -ag -- sent via 100% recycled electrons from my mobile command center. > On Apr 10, 2014, at 5:54 AM, Jason Todd wrote: > > Just to verify, heart bleed doesn't look like it effects the fipscanister. I > can just recompile openssl 1.0.1c with the no heart beat option and

FIPS 2.0: Heart Bleed

2014-04-10 Thread Jason Todd
Just to verify, heart bleed doesn't look like it effects the fipscanister. I can just recompile openssl 1.0.1c with the no heart beat option and my current canister and still retain FIPS certification.