On 08/30/2012 02:02 PM, Jason Todd wrote: > I understand that its not validated. But if I understand correctly, I > can claim "vendor affirmed" if I can build it with no modifications (and > at least the canister builds with no modifications). Is this correct?
Only if you are the vendor. In the case of validation #1747 the vendor is the OpenSSL Software Foundation. You are thinking of "user affirmation" (I.G. G.5): http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402IG.pdf -Steve M. -- Steve Marquess OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1 877 673 6775 s/b +1 301 874 2571 direct marqu...@opensslfoundation.com marqu...@openssl.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org