[Pkg-openssl-devel] Bug#1094576: Bug#1094576: openssl-provider-fips: package is not FIPS compliant

[Preissler, Jan]

We really appreciate the FIPS package and see value in having it, even when it does not have the necessary certification applied to it. The overall process for FIPS certification is painfully slow and tedious. Each change is considered something worth recertifying in the FIPS world. Something that might be deemed to be unrealistic.

So I would argue that not having a validated certification is not a bug. At least it’s nothing you can fix in software.


Any way, thanks for the effort!
Best regards,
Jan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-openssl-devel/attachments/20250716/b124d896/attachment.htm>