one var for default fips version

This commit is contained in:
Wade Simmons
2026-07-24 08:21:22 -04:00
parent 0d91e3e4d8
commit fc950cf765
+3 -2
View File
@@ -196,7 +196,8 @@ build/linux-amd64-boringcrypto/%: GOENV += GOEXPERIMENT=boringcrypto CGO_ENABLED
build/linux-arm64-boringcrypto/%: GOENV += GOEXPERIMENT=boringcrypto CGO_ENABLED=1 build/linux-arm64-boringcrypto/%: GOENV += GOEXPERIMENT=boringcrypto CGO_ENABLED=1
# fips140 # fips140
$(foreach _rule, $(ALL_FIPS140), build/$(_rule)/%): GOENV += GOFIPS140=v1.0.0 FIPSVERSION = v1.0.0
$(foreach _rule, $(ALL_FIPS140), build/$(_rule)/%): GOENV += GOFIPS140=$(FIPSVERSION)
$(foreach _rule, $(ALL_FIPS140), build/$(_rule)/%): BUILD_ARGS += -tags fips140enforce $(foreach _rule, $(ALL_FIPS140), build/$(_rule)/%): BUILD_ARGS += -tags fips140enforce
build/%/nebula: .FORCE build/%/nebula: .FORCE
@@ -278,7 +279,7 @@ endif
fips140: fips140:
@echo > $(NULL_FILE) @echo > $(NULL_FILE)
ifeq ($(strip $(GOFIPS140)),) ifeq ($(strip $(GOFIPS140)),)
$(eval GOFIPS140 = v1.0.0) $(eval GOFIPS140 = $(FIPSVERSION))
endif endif
$(eval GOENV += GOFIPS140=$(GOFIPS140)) $(eval GOENV += GOFIPS140=$(GOFIPS140))
$(eval BUILD_ARGS += -tags fips140enforce) $(eval BUILD_ARGS += -tags fips140enforce)