log the fips140 mode and version

Requires go1.26 for fips140.Version()
This commit is contained in:
Wade Simmons
2026-04-27 16:43:35 -04:00
parent e6eeb3709b
commit fcfbec4710
4 changed files with 22 additions and 4 deletions

View File

@@ -156,13 +156,15 @@ make bin-boringcrypto
make release-boringcrypto
```
Nebula can also be built using the [FIPS 140-3](https://go.dev/doc/security/fips140) mode of Go by running either of the following make targets:
Nebula can also be built to support the [FIPS 140-3](https://go.dev/doc/security/fips140) mode of Go by running either of the following make targets. (this must be set at compile time so that the correct AES-GCM can be used for FIPS 140-3 enforcement mode).
```sh
make fips140
make fips140 release
```
You will then also need to run nebula with `GODEBUG=fips140=only` to enable usage at runtime.
This is not the recommended default deployment, but may be useful based on your compliance requirements.
## Credits