Comment # 12 on bug 1231686 from OpenSSL Maintainers

(In reply to John Paul Adrian Glaubitz from comment #11)
> This is something the OpenSSL maintainers need to comment on.

Hi,

We blocked non approved EC curves for the FIPS 140-3 certification round in the
context of bsc#1221786 and we would like to keep the code as is. I'm adding
also Marcus in CC also to see if we could relax this in Factory. Otherwise, I
think we could follow the same approach as Fedora, this is using the patch [0]
mentioned in comment#8.

Regarding the openssl-3 versions in Factory, we do have version 3.1.7 at this
moment and the version 3.2.3 is about to be released. Once this one is out,
we'll move to 3.3.2 asap.

[0]
https://src.fedoraproject.org/rpms/AusweisApp2/blob/rawhide/f/AusweisApp2-2.0.1-use-legacy-openssl-api.patch