azurelinux
azurelinux copied to clipboard
SPECS/nginx Enable FIPS-140 mode
Is your feature request related to a problem? Please describe.
To be FIPS Compliance, nginx must use only approved cryptographic libraries by FIPS-140 to comply with government, financial & other customer requirements.
Describe the solution you'd like
OpenSSL 3 is the minimum version approved For Mariner, use OpenSSL that comes with it. Mariner team is committed to keep the crypto FIPS certified. Do not hardcode to OpenSSL 1.1.1. All code must be dynamically linked to OpenSSL, statically linking code to OpenSSL is not allowed.