[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

Cristi Fati added the comment: Thank you all for chiming in (so quickly). I did this in 2013 (maybe back then the situation was different), and have successfully used it since. Regarding comments: - Alex: 1: I'm not an expert, so I'm not going to argue with it. However I thought that if

[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

R. David Murray added the comment: Heh, I should have said "an" expert. With two weighing in I think I'll close this. Thanks for the contribution, though. Sorry we aren't going to make use of it. -- resolution: -> rejected stage: -> resolved status: open -> closed

[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

Christian Heimes added the comment: I second Alex's statement, too. Am 22. Juli 2016 21:48:20 MESZ, schrieb "R. David Murray" : > >R. David Murray added the comment: > >See also issue 9216 and issue 9146. Even if we wanted to do it it >sounds like it isn't quite as

[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

R. David Murray added the comment: See also issue 9216 and issue 9146. Even if we wanted to do it it sounds like it isn't quite as easy as allowing the mode to be set. I'm inclined to agree with Alex, since he's the expert. Especially since it *is* possible to set it from outside the

[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

Alex Gaynor added the comment: I'm opposed to adding FIPS knobs to Python's SSL module for a few reasons: - FIPS is a bad standard (which I'm happy to talk at length about) - OpenSSL is regularly on the verge of dropping FIPS support (https://www.openssl.org/blog/blog/2016/07/20/fips/ is the

[issue27592] FIPS_mode() and FIPS_mode_set() functions in Python (ssl)

New submission from Cristi Fati: During last years, the FIPS mode, has become more and more popular, especially in US (probably because it was "promoted" by government institutions). All OpenSSL versions (didn't check 1.0.0 or lower since they're no longer supported), have the "basic FIPS