On Fri, Jun 21, 2024 at 7:04 AM Khem Raj via lists.yoctoproject.org <raj.khem=gmail....@lists.yoctoproject.org> wrote:
> On Fri, Jun 21, 2024 at 1:03 AM emailaddress.ashish via > lists.yoctoproject.org > <emailaddress.ashish=gmail....@lists.yoctoproject.org> wrote: > > > > Hi Team , > > > > 1) We wanted to enable openssl-fips on our Yocto Image ( we are trying > on Yocto-5.5 ) > > Do we have any layer to support this or any recipe ? > > I was looking through recipe supported by open-embedded but could > not find any recipe for same. > > > > 2) Any suggestion or any inputs on same will be helpful. > > > > there is a layer > > https://layers.openembedded.org/layerindex/branch/master/layer/meta-openssl102-fips/ > its older version but could be a good starting point. > > OpenSSL 3.1 still has not been fully ratified for latest FIPS 140-3. It is a NIST backlog problem. You can absolutely build OpenSSL 3.0.8/3.0.9 though. https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4282 It is very different than openssl102 workflow. > > Thanks , > > Ashish > > > > > > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#63378): https://lists.yoctoproject.org/g/yocto/message/63378 Mute This Topic: https://lists.yoctoproject.org/mt/106795437/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
