Dimitri John Ledkov

I guess, I should test things against demo server to confirm server behaviour versus the static tests.

The requested feature has now been merged: - https://github.com/openssl/openssl/pull/28213 Has now been merged. The one that got merged uses P-224 curve for KAT, thus an upgrade to P-256 might still...

@lyoung-confluent note packages sboms should have Originator already in /var/lib/db/sbom/ for each package. Can you please check that it is there, and it is different for self built package; versus...

> > Arguably the packager field would be a more appropriate location for this value however that field does not end up in /lib/apk/db/installed, only a subset of fields are...

https://wiki.alpinelinux.org/wiki/Apk_spec#Installed_Database_V2 > This file is located at /lib/apk/db/installed. The installed file is a plaintext file of the same format as APKINDEX (contained in APKINDEX.tar.gz). https://wiki.alpinelinux.org/wiki/Apk_spec#APKINDEX_Format > U: - url (corresponds...

ooooh, i wonder if apko should do this: https://wiki.alpinelinux.org/wiki/Repositories#Repository_pinning specify our repositories as tagged; generate world file as tagged; and then things pin to our repository and version.

> > specify our repositories as tagged; generate world file as tagged; and then things pin to our repository and version > > Yeah I've talked to matt a little...

Basically the aws-lc is now the default rustls provider (instead of ring), and more stuff is likely standertise on it. And the fips version of it the 2.0.0 lifecycle policy...

> Interesting. I had not seen that rustls switched their default. I think that happened in https://github.com/rustls/rustls/commit/7415b5ff3d60a988a407b4e09680a06d4c17e837

> @xnox do you have a specific desire to have the AWS module or to have a FIPS validated module? Id the former, would be curious to know why >...