curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: Libcurl with OpenSSL 3.0 FIPS compliance

From: Daniel Stenberg via curl-library <>
Date: Tue, 7 Nov 2023 11:10:09 +0100 (CET)

On Tue, 7 Nov 2023, Priyanka Chauhan4 via curl-library wrote:

> Now we are planning to make our application FIPS complaint. Libcurl uses MD5
> which is not FIPS complaint Is there any document that I can refer and make
> libcurl FIPS complaint with openssl 30 or any release planned to handle FIPS
> compliance in libcurl.

If OpenSSL does not provide md5, curl will use its own md5 implementation for
the functionality that requires md5.

If you build curl without NTLM, SSPI or digest auth then it won't need or use
md5 at all.

  | Commercial curl support up to 24x7 is available!
  | Private help, bug fixes, support, ports, new features
Received on 2023-11-07