Slashdot Mirror

← Back to Stories (view on slashdot.org)

OpenSSL loses FIPS 140-2 Certification (Or Not)

Posted by ryuzaki0 on from the edoc-eht-kcarc-t'nod dept.

OhHellWithIt writes "Government Computer News reported on Tuesday that OpenSSL has lost FIPS 140-2 certification, only six months after receiving it. It sounds like bad news for those of us who would like to see open source gain more of a foothold in U.S. federal workplaces." Readers have updated this story with an update saying the certification has shifted again.

6 of 102 comments (clear)

  1. I'm guessing by PunkOfLinux · · Score: 5, Funny

    I'm guessing that this certification is necessary if you want your product to be used in the federal government, right???

    --
    Show this to your friends and family that don't know what a real hacker is
  2. Related Links by john_sheu · · Score: 1, Funny

    "receiving it" in the Related Links sidebar? That's just asking for it...

  3. Weasel words by sharkey · · Score: 3, Funny
    On July 14 the CMVP Web site listed the OpenSSL certificate 642 as revoked. On Monday it was listed as not available. A statement from CMVP supervisor Randy Easter indicated there is no distinction between the two terms.

    Then what honest reason is there for HAVING different terms?

    --

    --
    "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
  4. That's because by caluml · · Score: 2, Funny

    That's because they've found the back door I embedded in it while no-one was looking last Christmas. Wait, someone's at the door.

    --
    Get your own free personal location tracker
  5. Re:Reasons Not Given? by Anonymous Coward · · Score: 3, Funny



    Dear Smooth Wombat,
    You had heroin in your system and traces of anally absorbed KY Jelly.

    Regards,
    Three Letter Agency

  6. Re:Reasons Not Given? by ChrisDolan · · Score: 4, Funny

    TLA Psych Report for: [Smooth Wombat]
    Recommendation: REJECT
    Reason:
      Psych models predict subject shows high likelihood
      of revealing operational procedures to Slashdot