https://github.com/sgnn7/openssl-fips

OpenSSL FIPS-compliant 140-2 cryptographic module canister for Docker container targets.
https://github.com/sgnn7/openssl-fips

containers cryptography docker docker-container encryption fips fips-140-2 fips-build fips140-2 openssl openssl-tools security trusted-execution-environment

Last synced: 7 days ago
JSON representation

OpenSSL FIPS-compliant 140-2 cryptographic module canister for Docker container targets.

• Host: GitHub
• URL: https://github.com/sgnn7/openssl-fips
• Owner: sgnn7
• License: apache-2.0
• Created: 2021-10-18T16:27:52.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2021-12-13T22:24:24.000Z (almost 3 years ago)
• Last Synced: 2024-05-02T00:27:27.107Z (7 months ago)
• Topics: containers, cryptography, docker, docker-container, encryption, fips, fips-140-2, fips-build, fips140-2, openssl, openssl-tools, security, trusted-execution-environment
• Language: Shell
• Homepage: https://sgnn7.org
• Size: 65.4 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Codeowners: .github/CODEOWNERS

Awesome Lists containing this project

README

        
# openssl-fips

OpenSSL FIPS 140-2 cryptographic module canister for Docker containers

**Work in progress**

## Description

You can use the content of this repo to build a FIPS-compliant OpenSSL

version with containerized (aka reproducible) results. HAProxy is also

provided as an example of a derivative container that can then be built

with this as a FIPS-compliant application.

## Pre-requisites

- `jq`

- `docker`

## Usage

```sh-session

$ # Build FIPS OpenSSL container with FIPS canister

$ ./build.sh

$ # Build FIPS-compliant HAProxy

$ ./build.sh haproxy

$ # Build just the FIPS canister

$ ./build_fips_canister.sh

```

## Current Progress

- [Linux] OpenSSL FIPS Canister container buildable

- [Linux] FIPS OpenSSL container buildable

- [Linux] FIPS HAProxy container buildable with FIPS-enforcement patch

## TODO

- [Linux] Additional FIPS checks on HAProxy functionality

- [Windows] Pretty much everything

## Authors

- [Srdjan Grubor](https://github.com/sgnn7)