3 ms·
No, changing the source means you're not using FIPS-compliant source so you're breaking your terms. This is why you might have to use old versions of OpenSSL f
by danudey 13y ago
No, changing the source means you're not using FIPS-compliant source so you're breaking your terms.
This is why you might have to use old versions of OpenSSL for FIPS compliance - not all versions might be certified.
- eslaught 13y agoI think the GP is talking about a trusting trust attack on OpenSSL: Change the compiler to compile OpenSSL differently, rather than change the source itself.