I see the Epic has OpenSSL for its underlying crypto. It looks to me like it doesn’t include the optional FIPS module. Is that true? If so has anyone tried putting newer OpenSSL and or adding FIPS module onto the Epic for use?
I see the Epic has OpenSSL for its underlying crypto. It looks to me like it doesn’t include the optional FIPS module. Is that true? If so has anyone tried putting newer OpenSSL and or adding FIPS module onto the Epic for use?
I asked around, and no one has heard of any customers pressing FIPS into use.
That’s not to say no one is doing it; it’s just that none of the folks I asked had heard of it being used.
I’d wait a few months to see what the new firmware release offers. It has a lot of core updates.
Thank you. If you have any ability to steer the new release, please ask them to target/add OpenSSL 3.08 or 3.09 as those are the two current versions validated for FIPS, and build/install the FIPS provider on the Epic’s filesystem. That would save an end user from having to deploy a separate version.