8ec8900d31
Why I did it Support OpenSSL FIPS 140-3, see design doc: https://github.com/Azure/SONiC/blob/master/doc/fips/SONiC-OpenSSL-FIPS-140-3.md. How I did it Install the fips packages. To build the fips packages, see https://github.com/Azure/sonic-fips Azure pipelines: https://dev.azure.com/mssonic/build/_build?definitionId=412 How to verify it Validate the SymCrypt engine: admin@sonic:~$ dpkg-query -W | grep openssl openssl 1.1.1k-1+deb11u1+fips symcrypt-openssl 0.1 admin@sonic:~$ openssl engine -v | grep -i symcrypt (symcrypt) SCOSSL (SymCrypt engine for OpenSSL) admin@sonic:~$
11 lines
508 B
Plaintext
11 lines
508 B
Plaintext
SPATH := $($(SYMCRYPT_OPENSSL)_SRC_PATH)
|
|
DEP_FILES := $(SONIC_COMMON_FILES_LIST) rules/sonic-fips.mk rules/sonic-fips.dep
|
|
DEP_FILES += $(SONIC_COMMON_BASE_FILES_LIST)
|
|
SMDEP_FILES := $(addprefix $(SPATH)/,$(shell cd $(SPATH) && git ls-files))
|
|
|
|
$(SYMCRYPT_OPENSSL)_CACHE_MODE := GIT_CONTENT_SHA
|
|
$(SYMCRYPT_OPENSSL)_DEP_FLAGS := $(SONIC_COMMON_FLAGS_LIST)
|
|
$(SYMCRYPT_OPENSSL)_DEP_FILES := $(DEP_FILES)
|
|
$(SYMCRYPT_OPENSSL)_SMDEP_FILES := $(SMDEP_FILES)
|
|
$(SYMCRYPT_OPENSSL)_SMDEP_PATHS := $(SPATH)
|