In answer to the second question: there will *never* be a FIPS module for any 1.1.1 OpenSSL version. The next version of OpenSSL will be 3.0.0 and it will support FIPS. There will be a gap in FIPS support between the end of life of 1.0.2 and the validation of 3.0.0.
Pauli -- Dr Paul Dale | Cryptographer | Network Security & Encryption Phone +61 7 3031 7217 Oracle Australia > On 16 May 2019, at 8:29 pm, shiva kumar <[email protected]> wrote: > > Hi, > I wanted to move from OpenSSL 1.0.2r to 1.1.1b. I have some doubts they are > > 1) If I upgrade to 1.1.1b will it cause any problem to other applications? > which uses openssl for communications. ( say apache http server ). > > 2) can I expect FIPS module for 1.1.1b as well ? > > 3) since OpenSSL 1.1.1b doesn't have FIPS will this affect any other > application ? > > > > Thanks and regards > Shivakumar S >
