Request for Guidance or Feature Form

Do we have a problem where we need guidance from the CMVP to complete the FIPS 140-3 certification for OpenSSL?

@Chris Brych No.... I did (as mentioned in the LBC meeting) start with the RFG form from CMUF and removed a lot of the form that wasn't relevant. I did forget to remove the proprietary question.... I wanted to leave that there mostly as a reminder that if you are dealing with a proprietary request you may want to "stop" and reach out to OpenSSL directly. So I will change that.

This could be used for features, policy questions, etc for OpenSSL board. Just trying to provide a public channel for OpenSSL LBC to them (other than GIT which is mostly used for technical discussions and not for policy, etc).

Got it, thanks Jeff

@Chris Brych No problem at all! Thanks for asking because that provided me an opportunity for my first edit. Appreciate you taking the time to look at it.

All, I have revised the form and attached a new one here. Only change is the proprietary/non-proprietary section.

thx,

-jj

Unfortunately I wasn't able to attend the meeting — could you provide some context on what the purpose and intended use of this form is?

@Clemens Lang Sure. The idea is to provide a public and more formal channel for OpenSSL from the LBC. Think of things/questions like the one @Craig Lorentzen was looking for resolution on (Policy on FIPS Providers). Another policy style question would be "should OpenSSL have an AI policy" .... etc. Also perhaps guidance on roadmap items such as MTC's, etc. It could be feature requests that the LBC believes are relevant but there has been no public discourse on with OpenSSL. Basically any non-proprietary request to OpenSSL BAC or board from the LBC.

Fully realize that some large businesses have commercial relationships with OpenSSL and there may be other channels but not everyone is in that position. So this is an opportunity for any large business to have questions answered or clarified, proposal's considered, etc.

@Clemens Lang I almost forgot the most important part! This provides a way for members of the LBC to have open and public debate in the monthly meetings or at face-to-face meetings. A mechanism for the community to have input to OpenSSL in public forum, especially for those companies who might not have the advantage of a commercial relationship and yet may have some valuable input or insight for OpenSSL at large.