HomeFreeBSD

openssl: Remove fips module from base system.

Description

openssl: Remove fips module from base system.

To comply with FIPS 140 guidance, you must be using a specifically
validated and approved version of the fips module. Currently, only
OpenSSL 3.0.8 and 3.0.9 have been approved by NIST for FIPS 140
validation. As such, we need to stop shipping later versions of the
module in the base system.

MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D46223

Details

Provenance
gordonAuthored on Aug 4 2024, 9:10 PM
Differential Revision
D46223: openssl: Remove fips module from base system.
Parents
rGa2f53837f0a8: valectl(8): explicitly mention network switches
Branches
Unknown
Tags
Unknown