File tree 1 file changed +8
-0
lines changed
1 file changed +8
-0
lines changed Original file line number Diff line number Diff line change @@ -783,6 +783,7 @@ dynamically linking with OpenSSL 3.0.0 by using the configuration flag
783
783
### FIPS support when statically linking OpenSSL
784
784
785
785
FIPS can be supported by specifying the configuration flag ` --openssl-is-fips ` :
786
+
786
787
``` console
787
788
$ ./configure --openssl-is-fips
788
789
$ make -j8
@@ -795,23 +796,30 @@ to include the correct path to fipsmodule.cnf and finally uncomment the fips
795
796
section.
796
797
797
798
We can then run node specifying ` --enable-fips ` :
799
+
798
800
``` console
799
801
$ ./node --enable-fips -p ' crypto.getFips()'
800
802
1
801
803
```
804
+
802
805
The above will use the Node.js default locations for OpenSSL 3.0:
806
+
803
807
``` console
804
808
$ ./out/Release/openssl-cli version -m -d
805
809
OPENSSLDIR: "/nodejs/openssl/out/Release/obj.target/deps/openssl"
806
810
MODULESDIR: "/nodejs/openssl/out/Release/obj.target/deps/openssl/lib/openssl-modules"
807
811
```
812
+
808
813
The OpenSSL configuration files will be found in ` OPENSSLDIR ` directory above:
814
+
809
815
``` console
810
816
$ ls -w 1 out/Release/obj.target/deps/openssl/* .cnf
811
817
out/Release/obj.target/deps/openssl/fipsmodule.cnf
812
818
out/Release/obj.target/deps/openssl/openssl.cnf
813
819
```
820
+
814
821
And the FIPS module will be located in the ` MODULESDIR ` directory:
822
+
815
823
``` console
816
824
$ ls out/Release/obj.target/deps/openssl/lib/openssl-modules/
817
825
fips.so
You can’t perform that action at this time.
0 commit comments