DevConf CZ 2023 summary

• 3 OpenSSL-related talks
  • OpenSSL's Journey recommended
    • OpenSSL 3.0 => FIPS 140-2
    • OpenSSL 3.1 => FIPS 140-3
    • OpenSSL 3.2 => QUIC (a replacemnt of TCP + TLS)
  • Migration of OpenSSL with source-git
    A lightning talk: How to use the source-git (Packit) to update the dist-git rpms/openssl easily.
  • OpenSSL 3 providers
    • The introduction of the OpenSSL 3 providers feature.
      • This is related to the configuration file of FIPS. The FIPS configuration file has the base and fips providers.
    • The details of the implementation.
    • Tips of debugging.
• 2 FIPS talks
  • Life beyond FIPS 140-3 recommended
    A big picture of FIPS. How it is organized.
    • General discussion about the FIPS mode:
      • Cryptographic Module User Forum - Click "Collaboration Tool" to join.
  • Security compliance
    • FIPS topic is included. I couldn't attend.
• Others
  • crypto-auditing: A monitoring tool to observe the used encryption in the system, and alert when the old ones are still used.
  • Modern strace
  • GNU poke: interactive binary editor.
  • Valgrind and GDB - I attend in the middle of the session. I will watch the recording later.
  • Dynamic RPM packaging - I was not able to attend it. I will watch the recording later.
  • Containers in a Car: - I was not able to attend it. I will watch the recording later.
  • Wriring blog