-
Notifications
You must be signed in to change notification settings - Fork 202
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use OpenSSL as an optional crypto provider #1529
Comments
syedriko
added a commit
to syedriko/smithy-rs
that referenced
this issue
Jul 5, 2022
A first stab at making OpenSSL an alternative crypto provider in aws-sigv4 and aws-config, so the SDK can be consumed in a FIPS environment.
syedriko
added a commit
to syedriko/smithy-rs
that referenced
this issue
Jul 5, 2022
A first stab at making OpenSSL an alternative crypto provider in aws-sigv4 and aws-config, so the SDK can be consumed in a FIPS environment.
syedriko
added a commit
to syedriko/smithy-rs
that referenced
this issue
Jul 5, 2022
A first stab at making OpenSSL an alternative crypto provider in aws-sigv4 and aws-config, so the SDK can be consumed in a FIPS environment.
For the sake of cross-referencing, here is the corresponding issue for Vector the observability data pipeline tool: vectordotdev/vector#8435 |
syedriko
added a commit
to syedriko/smithy-rs
that referenced
this issue
Jul 6, 2022
A first stab at making OpenSSL an alternative crypto provider in aws-sigv4 and aws-config, so the SDK can be consumed in a FIPS environment.
syedriko
added a commit
to syedriko/smithy-rs
that referenced
this issue
Sep 20, 2022
A first stab at making OpenSSL an alternative crypto provider in aws-sigv4 and aws-config, so the SDK can be consumed in a FIPS environment.
Closing in favor of tracking issue #3563. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In a FIPS environment, there is a requirement that all crypto operations are delegated to a FIPS-certified crypto module. Some Linux distributions, such as RHEL, ship FIPS-certified OpenSSL. In order for the SDK to be usable in such environment, it should be possible to rely on OpenSSL for all crypto needs.
#261 seems to be related.
The text was updated successfully, but these errors were encountered: