[Bug 1553309] Re: [FFe]: Include FIPS 140-2 into openssl package

[Martin Pitt]

The bug title is misleading -- judging by the patch this is by far more
than just adding a new selftest. This patch changes the runtime
behaviour in multiple places too.

Can you please describe what FIPS is, where the patch comes from, how
this got tested, how can we be sure that this does not break
interoperability, etc?

** Summary changed:

- [FFe]: Include FIPS 140-2 selftest into openssl  package
+ [FFe]: Include FIPS 140-2 into openssl  package

** Changed in: openssl (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1553309

Title:
  [FFe]: Include FIPS 140-2 into openssl  package

Status in openssl package in Ubuntu:
  Incomplete

Bug description:
  This is a request for a Feature Freeze Exception to include FIPS 140-2 selftest into the openssl package in preparation for the FIPS 140-2 compliance for 16.0.4. 
  This patchset will :
   - add ability to config, compile, run with fips option enabled
   - add the selftest files to crypto/fips directory. 
   - minor changes to several algorithms in crypto directory to ensure the selftest compile successfully when fips is enabled. 
   
  The selftest will be initiated externally at this point and not internally.
  Hope to have a test package ready early next week.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1553309/+subscriptions