Thanks Tim & Khem Raj . Will look at these points - Ashish
On Fri, Jun 21, 2024 at 9:32 PM Tim Orling via lists.yoctoproject.org <ticotimo=gmail....@lists.yoctoproject.org> wrote: > > > On Fri, Jun 21, 2024 at 7:04 AM Khem Raj via lists.yoctoproject.org > <raj.khem=gmail....@lists.yoctoproject.org> wrote: > >> On Fri, Jun 21, 2024 at 1:03 AM emailaddress.ashish via >> lists.yoctoproject.org >> <emailaddress.ashish=gmail....@lists.yoctoproject.org> wrote: >> > >> > Hi Team , >> > >> > 1) We wanted to enable openssl-fips on our Yocto Image ( we are trying >> on Yocto-5.5 ) >> > Do we have any layer to support this or any recipe ? >> > I was looking through recipe supported by open-embedded but could >> not find any recipe for same. >> > >> > 2) Any suggestion or any inputs on same will be helpful. >> > >> >> there is a layer >> >> https://layers.openembedded.org/layerindex/branch/master/layer/meta-openssl102-fips/ >> its older version but could be a good starting point. >> >> > OpenSSL 3.1 still has not been fully ratified for latest FIPS 140-3. It is > a NIST backlog problem. > > You can absolutely build OpenSSL 3.0.8/3.0.9 though. > https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4282 > It is very different than openssl102 workflow. > > >> > Thanks , >> > Ashish >> > >> > >> >> >> >> > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#63379): https://lists.yoctoproject.org/g/yocto/message/63379 Mute This Topic: https://lists.yoctoproject.org/mt/106795437/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
