[Ci-users] CentOS 7/8 OpenSSL / FIPS 140-2 / FedRAMP

Hello,

I was wondering if the source code for OpenSSL (1.1.*) in CentOS 7 and 8 is exactly the same as Red Hat and thus would be considered equivalent from a FIPS 140-2 cert standpoint. See the RHEL 7.0 OpenSSL FIPS certificate below. https://csrc.nist.gov/Projects/cryptographic-module-validation-program/Certi...

Also, has anyone recently used Cent OS 7 with OpenSSL EL rpm (1.1.*) to successfully obtain FedRAMP Moderate authorization or was it necessary to switch to Red Hat?

Thanks Salman