Vulnerabilities no impact is for OpenSSL 3.0.10 FIPS provider or OpenSSL 3.0.9 FIPS provider ? #21655
-
|
OpenSSL 3.0.10 fixes vulnerabilities mentioned in https://www.openssl.org/news/fips-cve.html |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
From the Download page:
The only validated versions listed on the download page are 3.0.0 and 3.0.8. So use 3.0.10 for the libssl/libcrypto etc, but use the FIPS provider from 3.0.8 There is extensive discussion on how to do this in the README-FIPS.md file: https://github.com/openssl/openssl/blob/openssl-3.0/README-FIPS.md |
Beta Was this translation helpful? Give feedback.
From the Download page:
The only validated versions listed on the download page are 3.0.0 and 3.0.8. So use 3.0.10 for the libssl/libcrypto etc, but use the FIPS provider from 3.0.8
There is extensive discussion on how to do this in the README-FIPS.md file:
https://github.com/openssl/openssl/blob/openssl-3.0/README-FIPS.md