<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi,<br>Anything you can do will be appreciated.<br>Regarding the FIPS concern, I hear you but it's never really that black and white.<br>One way to look on it is as follows:<br>1) Allowing pacemaker to compile with OpenSSL and without GnuTLS (original post)<br>2) Making pacemaker a FIPS approved software<BR>Alt. 1 is Practical; Common (e.g., freetds RPM); Natural and Extends package "availability" <br>(FIPS customers that are not allowed to use GnuTLS will have pacemaker in the gray area rather than black)<br>Alt. 2 is Expensive; Takes time; but gains Certificated and Business motivated.<br> <br>The less secure claim is also gray. Major security fixes are nowadays released quickly (e.g., heartbleed).<br>Anyway, how users handle bugs in FIPS env. is not an HA community concern.<BR>Best,<br>Oren<br><BR> </div></body>
</html>