Brendan Simon wrote:
Where can I find information about OpenSSL FIPS Object Module v1.2 ???
Where can this be downloaded from? CVS only? Or are there tarballs
somewhere?
CVS only, branch OpenSSL-fips-0_9_8-stable branch. I'm not releasing
the draft Security Policy yet because it has not been reviewed by the
CMVP and there's not much any outsiders could contribute to it anyway --
it doesn't have a lot of technical content. I will publish the draft
User Guide, which will have useful technical content, when I have a
chance to finish the edits from the v1.1.1 version. Since that's not a
deliverable to the CMVP process it isn't a high priority, sorry.
Your first stop for information about OpenSSL and FIPS 140-2 should be
the v1.1.1 User Guide,
http://www.openssl.org/docs/fips/UserGuide-1.1.1.pdf. I also recently
updated the FAQ at http://oss-institute.org/fips-faq.html and will
extend that as time permits.
Where does FIPS related development/discussion take place? Just the
users mailing list?
Yes, and/or the OpenSSL dev list.
Is there a spot on the website dedicated to FIPS related information?
I can't find anything?
There are occasional news pieces at the OSSI website,
http://oss-institute.org/. I'll try to be better about announcements to
the OpenSSL lists.
-Steve M.
--
Steve Marquess
Open Source Software Institute
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]