Re: Missing Appendix in the FIPS 140-3 Security Policy

Tomas Mraz <[email protected]>
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <[email protected]>
Hello Zach,

there is no such Appendix A. The sentence is a leftover from previous
revisions of the SP document and should be just deleted.

Kind regards,

Tomas Mraz, OpenSSL

On Tue, 2025-04-01 at 06:50 -0700, 'Zach Zuzzio' via openssl-users
wrote:
> The "29 December 2023" dated version FIPS 140-3 security policy
> linked on the NIST CMVP page for Certificate #4985 can be found here:
> https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4985
> 
> Section 11.a has the following statement:
> 
> "Note: The instructions for building and installing OpenSSL 3.1.2 on
> other platforms can be found in the platform-specific guidance
> provided in INSTALL.md and README-FIPS.md in the OpenSSL 3.1.2
> distribution package. Please see Appendix A for further information
> on porting the Module to platforms apart from the Tested
> Configurations in Table 2."
> 
> The section reads "Please see Appendix A ..." and there is no
> Appendix section in this version of the security policy document. Can
> a corrected security policy with the missing Appendix be linked to
> certificate #4985?
> 
> For more information on how and why we collect your personal
> information, please visit our Privacy Policy.
> -- 
> You received this message because you are subscribed to the Google
> Groups "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/694ba150-120f-4824-815d-a0286ac9738dn%40openssl.org
> .

-- 
Tomáš Mráz, OpenSSL

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/e401693bbc6faadec83c719b6ff703faaf2aad47.camel%40openssl.org.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.