Table of Contents

• Table of Contents
• Conjur Base Image
• Certification level
• Feature
• Usage
• What is FIPS 140-2
• Contributing
• License

Conjur Base Image

This repo build a docker image contains OpenSSL, Ruby and Postgres client compiled against the FIPS 140-2 compliant OpenSSL module.

Two images included:

• Phusion
• Ubuntu

Certification level

This repo is a Trusted level project. It's been reviewed by CyberArk to verify that it will securely work with Conjur OSS as documented. For more detailed information on our certification levels, see our community guidelines.

Feature

• A minimal base image to reduce attack surface and external dependencies
• Vulnerability scanning
• Builder container for OpenSSL, Ruby and Postgres client
• Last security update
• Jenkins pipeline for building the Docker image
• Automated tests validate FIPS mode is successfully enabled and all artifacts compiled against the FIPS 140-2 compliant
• One OpenSSL version installed in the image
  • OpenSSL version: openssl-1.0.2u
  • OpenSSL FIPS Module version: openssl-fips-2.0.16

Usage

• Phusion image is the parent image of DAP appliance
• Ubuntu image is the parent image of Conur

What is FIPS 140-2

The Federal Information Processing Standard Publication 140-2, (FIPS PUB 140-2),is a U.S. government computer security standard used to approve cryptographic modules. The title is Security Requirements for Cryptographic Modules.

For more information, visit the FIPS 140-2 Wikipedia Page.

Contributing

We welcome contributions of all kinds to this repository. For instructions on how to get started and descriptions of our development workflows, please see our contributing guide.

License

This repository is licensed under Apache License 2.0 - see LICENSE for more details.