[KUDU-3210] Support FIPS approved mode

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.14.0
• Assignee: Attila Bukor
• Reporter: Attila Bukor
• Created: 29/Oct/20 15:09
• Updated: 10/Nov/22 20:38
• Resolved: 13/Jan/21 15:37

Description

FIPS 140-2 is a standard used to approve cryptographic modules. Some versions of OpenSSL support a "FIPS mode" where only approved algorithms and key sizes are enabled. Kudu should be able to run when FIPS mode is enabled and should provide a way for admins to require that FIPS mode is enabled.