README-FIPS: clarify provider and library cross-version compatibility

State that a FIPS provider built from any validated version may be
used together with an OpenSSL library built from any supported release
from OpenSSL 3.0 onwards, backward and forward, including future major
release series.

The downloads page references in the updated paragraph now point at
https://openssl-library.org/source/, which www.openssl.org/source/
redirects to.

Aligns the documentation with the OpenSSL Library FIPS Module
Support Policy.

Assisted-by: Claude Code:claude-fable-5
Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Merge-date: Tue Aug 18 07:21:24 2026
Merged-from: https://github.com/openssl/openssl/pull/32105
This commit is contained in:
Anton Arapov authored and Richard Levitte committed 2026-08-18 09:20:29 +02:00
1 parent 090868518b
commit 93a175f15a
1 file changed
+8 -4
+8 -4
View File
@@ -32,11 +32,15 @@ Installing the FIPS provider
============================
In order to be FIPS compliant you must only use FIPS validated source code.
Refer to <https://www.openssl.org/source/> for information related to
Refer to <https://openssl-library.org/source/> for information related to
which versions are FIPS validated. The instructions given below build OpenSSL
just using the FIPS validated source code. Any FIPS validated version may be
used with any other openssl library. Please see <https://www.openssl.org/source/>
To determine which FIPS validated library version may be appropriate for you.
just using the FIPS validated source code. A FIPS provider built from any
validated version may be used together with an OpenSSL library built from any
supported release from OpenSSL 3.0 onwards; provider compatibility is
maintained backward and forward across these releases, including future major
release series, for as long as the module remains supported. Please see
<https://openssl-library.org/source/>
to determine which FIPS validated library version may be appropriate for you.
If you want to use a validated FIPS provider, but also want to use the latest
OpenSSL release to build everything else, then refer to the next section.