Skip to content

docs: update FIPS documentation with newer validation procedures

Andrew Newdigate OoO requested to merge an/fips-docs into master

This updates the FIPS documentation with a newer procedure for validating that a Go-compiled binary has been correctly linked against the BoringSSL library.

My understanding is that versions of Golang-FIPS > 1.20 need a newer updated method to validating that the FIPS library is being used.

Related to gitlab-com/gl-infra/common-ci-tasks!741 (merged)

Further discussion on this change is available at:

  1. https://stackoverflow.com/questions/75638176/how-can-i-check-whether-my-golang-app-uses-boringcrypto-instead-of-the-native-go
  2. https://github.com/rsc/goversion/commit/3a30cee7003ec5dc0903682e79b3059c8e101952
  3. https://github.com/rsc/goversion/pull/21
Edited by Andrew Newdigate OoO

Merge request reports

Loading