Adjust default TLS versions, ciphers & curves according to FIPS config

envoyproxy / envoy-openssl

Envoy OpenSSL extensions

Apache License 2.0

47 stars 45 forks source link

Adjust default TLS versions, ciphers & curves according to FIPS config #237

Closed tedjpoole closed 2 months ago

tedjpoole commented 2 months ago

This PR reinstates the code to adjust TLS versions, curves & ciphers, according to whether or not the system is in FIPS mode. The code was in maistra-2.5 but had not been carried forward to maistra-2.6.

Fixes OSSM-6786