bumptech / stud

The Scalable TLS Unwrapping Daemon
Other
1.43k stars 194 forks source link

FIPS Build Options #145

Open mikecurrancs opened 10 years ago

mikecurrancs commented 10 years ago

I see in the Makefile that there is a switch expected for

ifeq ($(STUD_FIPS_MODE),1)

However, there is no configure script where I would give a flag for FIPS mode, the README makes no mention of how to enable FIPS mode, and I need to use a static library to get a write-off on FIPS 140-2 OpenSSL for government use.

I am just going to modify the Makefile to temporarily assume its built and ready and declare a build directory for FIPS-2.0

Are you planning on modifying the build process to allow for alternate static FIPS implementations? True FIPS builds cannot change the directory (and with FIPS-2.0 you dont declare to build the fipscanister any longer).