mirror of
https://github.com/slackhq/nebula.git
synced 2026-05-16 04:47:38 +02:00
log the fips140 mode and version
Requires go1.26 for fips140.Version()
This commit is contained in:
@@ -156,13 +156,15 @@ make bin-boringcrypto
|
||||
make release-boringcrypto
|
||||
```
|
||||
|
||||
Nebula can also be built using the [FIPS 140-3](https://go.dev/doc/security/fips140) mode of Go by running either of the following make targets:
|
||||
Nebula can also be built to support the [FIPS 140-3](https://go.dev/doc/security/fips140) mode of Go by running either of the following make targets. (this must be set at compile time so that the correct AES-GCM can be used for FIPS 140-3 enforcement mode).
|
||||
|
||||
```sh
|
||||
make fips140
|
||||
make fips140 release
|
||||
```
|
||||
|
||||
You will then also need to run nebula with `GODEBUG=fips140=only` to enable usage at runtime.
|
||||
|
||||
This is not the recommended default deployment, but may be useful based on your compliance requirements.
|
||||
|
||||
## Credits
|
||||
|
||||
Reference in New Issue
Block a user