Skip to content

Conversation

@jbdelcuv
Copy link
Contributor

@jbdelcuv jbdelcuv commented Oct 7, 2025

Upgrade the SGX-SSL library to utilize OpenSSL 3.0.17 while leaving OpenSSL 3.1.6 to provide FIPS provider support.

There aren't any differences between OpenSSL 3.0.12 and 3.0.17.

Signed-off-by: Juan del Cuvillo <[email protected]>
It is explicitly disabled by default.

Signed-off-by: Juan del Cuvillo <[email protected]>
the FIPS provider requires OpenSSL 3.1.

Signed-off-by: Juan del Cuvillo <[email protected]>
FIPS causes the Makefile to prematurely show error.

Signed-off-by: Juan del Cuvillo <[email protected]>
… RDSEED

or RDRAND instruction rather than an OS-specific source of entropy.

Signed-off-by: Juan del Cuvillo <[email protected]>
Confirm that issue #264 has been resolved.

Signed-off-by: Juan del Cuvillo <[email protected]>
We only this script to build the SGX-SSL library, which depends on
OpenSSL 3.0 series, not the OpenSSL FIPS provider.

Signed-off-by: Juan del Cuvillo <[email protected]>
the FIPS provider has not yet been built.

Signed-off-by: Juan del Cuvillo <[email protected]>
Signed-off-by: Juan del Cuvillo <[email protected]>
Signed-off-by: Juan del Cuvillo <[email protected]>
Signed-off-by: Juan del Cuvillo <[email protected]>
Proper fix to the Makefile needed.

Signed-off-by: Juan del Cuvillo <[email protected]>
@jbdelcuv jbdelcuv requested review from andyzyb and binxing October 8, 2025 17:30
@jbdelcuv jbdelcuv merged commit 070657f into main Oct 9, 2025
3 checks passed
@jbdelcuv jbdelcuv requested a review from bgotowal October 15, 2025 19:42
@jbdelcuv jbdelcuv deleted the dev/jbdelcuv/support_openssl_3.0.17 branch October 23, 2025 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Forcing installing the FIPS library while not building FIPS causes the Makefile to prematurely show error

3 participants