Introduce 'fips_mode' environment variable

processone / fast_tls

TLS / SSL OpenSSL-based native driver for Erlang / Elixir

https://www.ejabberd.im

Other

83 stars 37 forks source link

Introduce 'fips_mode' environment variable #54

Closed zinid closed 2 years ago

zinid commented 2 years ago

When fips_mode is set to true/false, FIPS mode is enabled/disabled on NIF load. Note that when the variable is not set, nothing happens. The variable name and behaviour was chosen to be consistent with crypto library (https://www.erlang.org/doc/apps/crypto/fips.html).

Also fast_tls:set_fips_mode/1 is introduced which can be used to explicitly enable/disable FIPS and fast_tls:get_fips_mode/0 is introduced to check whether FIPS mode is enabled or not.

p1bot commented 2 years ago

Hi @zinid, many thanks for your contribution!

In order for us to evaluate and accept your PR, we ask that you sign a contribution license agreement. It's all electronic and will take just minutes.

coveralls commented 2 years ago

Coverage decreased (-1.4%) to 57.742% when pulling 9fc1ad8d241b66539e388917830641e49d7a445f on zinid:fips into f1f61c2d37aa70683ecc4417f5d1b41ea1232586 on processone:master.

p1bot commented 2 years ago

You did it @zinid!

Thank you for signing the ProcessOne Contribution License Agreement.

We will have a look at your contribution!