5 Commits

Author	SHA1	Message	Date
Ryan Richard	1f8ac0ff23	Also probe aggregated API ports in new ciphers test ... Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>	2024-06-14 13:27:38 -07:00
Joshua Casey	4ab2ed10f5	Add integration test for allowed ciphers	2024-06-14 10:42:17 -07:00
Ryan Richard	50e4d6db6c	Support the new Go FIPS compiler which was upgraded inside Go 1.21.6 ... The release of Go 1.21.6 includes the new boring crypto when compiling with FIPS enabled. See https://go.dev/doc/devel/release#go1.21.0 and https://github.com/golang/go/issues/64717. This new version of boring crypto allows the use of TLS v1.3 for the first time, so we changed the Pinniped code to use TLS v1.3 where appropriate when compiled with the FIPS compiler. It also changed the allowed TLS v1.2 ciphers, so we updated those as well. After this commit, the project must be compiled by at least Go v1.21.6 when compiling in fips mode. The hack/Dockerfile_fips was already updated to use that version of Go in a previous commit. Co-authored-by: Benjamin A. Petersen <ben@benjaminapetersen.me>	2024-01-18 14:23:26 -08:00
Monis Khan	15bc6a4a67	Add more details to FIPS comments ... Signed-off-by: Monis Khan <mok@vmware.com>	2022-04-01 10:56:38 -04:00
Margo Crawford	53597bb824	Introduce FIPS compatibility ... Signed-off-by: Margo Crawford <margaretc@vmware.com>	2022-03-29 16:58:41 -07:00