sonic-buildimage/dockers/docker-base-bullseye
xumia 8ec8900d31
Support SONiC OpenSSL FIPS 140-3 based on SymCrypt engine (#9573)
Why I did it
Support OpenSSL FIPS 140-3, see design doc: https://github.com/Azure/SONiC/blob/master/doc/fips/SONiC-OpenSSL-FIPS-140-3.md.

How I did it
Install the fips packages.
To build the fips packages, see https://github.com/Azure/sonic-fips
Azure pipelines: https://dev.azure.com/mssonic/build/_build?definitionId=412

How to verify it
Validate the SymCrypt engine:

admin@sonic:~$ dpkg-query -W | grep openssl
openssl 1.1.1k-1+deb11u1+fips
symcrypt-openssl        0.1

admin@sonic:~$ openssl engine -v | grep -i symcrypt
(symcrypt) SCOSSL (SymCrypt engine for OpenSSL)
admin@sonic:~$
2022-05-06 07:21:30 +08:00
..
etc Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
root Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
Dockerfile.j2 Support SONiC OpenSSL FIPS 140-3 based on SymCrypt engine (#9573) 2022-05-06 07:21:30 +08:00
dpkg_01_drop Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
LICENSE Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
no_install_recommend_suggest Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
no-check-valid-until Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
sources.list Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
sources.list.arm64 Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
sources.list.armhf Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00