Explain this sandbox for inquiring minds

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/fips-dev@189833 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/README-FIPS b/README-FIPS
new file mode 100644 (file)
index 0000000..6935eac
--- /dev/null
+++ b/README-FIPS
@@ -0,0 +1,24 @@
+SANDBOX httpd/branches/fips-dev explained:\r
+\r
+This sandbox is for development around the FIPS 140-2 standard as implemented\r
+by Ben Laurie and team of OpenSSL with the 0.9.7 verisons.  The effort for\r
+OpenSSL FIPS certification is coordinated by the Open Source Software\r
+Institute.  OpenSSL 0.9.7 is in the process of certification testing.  See:\r
+\r
+  http://oss-institute.org/index.php?option=content&task=view&id=109\r
+\r
+The crypto layer, itself, is the object of certification.  In this case,\r
+that is encompased in libcrypto.so.  But libcrypto.so needs to be told to\r
+enforce FIPS 140 policy, and mod_ssl needs to be adjusted to the FIPS 140\r
+subset of permitted cryptography.\r
+\r
+This effort is initially coordinated by Ben Laurie and Will Rowe; of course\r
+all voulenteers and feedback are welcome!\r
+\r
+It is something of the cart before the horse; meant to demonstrate both the\r
+need for the NIST to certify OpenSSL, and the proper application of a fips\r
+build of the OpenSSL library.\r
+\r
+Note this branch includes apr and apr-util, while the authors figure out what\r
+to do about apr MD5 and other fips issues are resolved.  That work will be\r
+submitted to the apr project, once the least distruptive change is ascertained.\r