Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSL FIPS compliance for OSS #1527

Closed
nahumcohen opened this issue May 6, 2020 · 0 comments
Closed

OpenSSL FIPS compliance for OSS #1527

nahumcohen opened this issue May 6, 2020 · 0 comments

Comments

@nahumcohen
Copy link
Contributor

Is your feature request related to a problem? Please describe.

OpenSSL:

Currently Conjur is using OpenSSL 1.1.1 which is not FIPS compliant yet. We will have to downgrade to 1.0.2 - which have FIPS compliant version.
Understand what needs to be done if we would want to change the configuration between FIPS to non-FIPS during installation.

Describe the solution you would like

At the end OSS will be fully FIPS complaint.
If a non FIPS encryption method is used the server will shut down.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants