Hello all,
I’ve run into a situation where OpenSSL within haproxy needs to be put into FIPS Mode (see links at bottom). The easiest way to do this is via a global config option. This is pretty trivial to add.
Is there any interest in taking this feature into the main codebase? Are there any other people that are looking for this functionality?
-Dave
See:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/FIPS_Mode_-_an_explanation
https://en.wikipedia.org/wiki/Federal_Information_Processing_Standards
https://wiki.openssl.org/index.php/FIPS_mode_set()
I’ve run into a situation where OpenSSL within haproxy needs to be put into FIPS Mode (see links at bottom). The easiest way to do this is via a global config option. This is pretty trivial to add.
Is there any interest in taking this feature into the main codebase? Are there any other people that are looking for this functionality?
-Dave
See:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/FIPS_Mode_-_an_explanation
https://en.wikipedia.org/wiki/Federal_Information_Processing_Standards
https://wiki.openssl.org/index.php/FIPS_mode_set()