Re: OpenSSL FIPS Object Module v2.0 validation now complete

2012-07-01 Thread Steve Marquess
On 06/30/2012 08:55 PM, Paul Suhler wrote: > I see that the FIPS 2.0 tarball is not available online. Moreover, > the link to request a CD (http://openssl.com/fips/verify.html) > doesn't work. Should be fixed now ... we've only recently recovered from a major and extended power outage. -Steve M.

RE: OpenSSL FIPS Object Module v2.0 validation now complete

2012-06-30 Thread Paul Suhler
I see that the FIPS 2.0 tarball is not available online. Moreover, the link to request a CD (http://openssl.com/fips/verify.html) doesn't work. Thanks, Paul _ Paul A. Suhler, PhD | Firmware Eng

Re: OpenSSL FIPS Object Module v2.0 validation now complete

2012-06-28 Thread Steve Marquess
On 06/28/2012 01:17 PM, "Magosányi, Árpád" wrote: > On 06/28/2012 06:42 PM, Keith Bennett wrote: >> I do wonder if this is the proper time & place to discuss the >> implications of requiring source code to have been obtained by a >> "secure path" excluding the internet. Can an internet-enabled open

Re: OpenSSL FIPS Object Module v2.0 validation now complete

2012-06-28 Thread Magosányi, Árpád
On 06/28/2012 06:42 PM, Keith Bennett wrote: > I do wonder if this is the proper time & place to discuss the > implications of requiring source code to have been obtained by a > "secure path" excluding the internet. Can an internet-enabled open > source therefore be considered "secure" by that defi

Re: OpenSSL FIPS Object Module v2.0 validation now complete

2012-06-28 Thread Steve Marquess
On 06/28/2012 12:42 PM, Keith Bennett wrote: > I do wonder if this is the proper time & place to discuss the > implications of requiring source code to have been obtained by a "secure > path" excluding the internet. Can an internet-enabled open source > therefore be considered "secure" by that defi

Re: OpenSSL FIPS Object Module v2.0 validation now complete

2012-06-28 Thread Keith Bennett
I do wonder if this is the proper time & place to discuss the implications of requiring source code to have been obtained by a "secure path" excluding the internet. Can an internet-enabled open source therefore be considered "secure" by that definition? -- Keith Bennett