azurelinux icon indicating copy to clipboard operation
azurelinux copied to clipboard

SPECS/nginx Enable FIPS-140 mode

Open julienstroheker opened this issue 1 year ago • 0 comments

Is your feature request related to a problem? Please describe.

To be FIPS Compliance, nginx must use only approved cryptographic libraries by FIPS-140 to comply with government, financial & other customer requirements.

Describe the solution you'd like

OpenSSL 3 is the minimum version approved For Mariner, use OpenSSL that comes with it. Mariner team is committed to keep the crypto FIPS certified. Do not hardcode to OpenSSL 1.1.1. All code must be dynamically linked to OpenSSL, statically linking code to OpenSSL is not allowed.

julienstroheker avatar Apr 30 '24 22:04 julienstroheker