crypto: support FIPS mode of OpenSSL
authorFedor Indutny <fedor@indutny.com>
Mon, 1 Jun 2015 21:49:43 +0000 (23:49 +0200)
committerFedor Indutny <fedor@indutny.com>
Wed, 10 Jun 2015 23:49:20 +0000 (01:49 +0200)
commit0f68377f69823dd470fdb1ae90287c2ea4f8f404
treea36b73db087e2ea8e53af103e989a77984706aaa
parent53a4eb319893d722cd614bacde98856b1f7c37cb
crypto: support FIPS mode of OpenSSL

Support building and running with FIPS-compliant OpenSSL. The process is
following:

1. Download and verify `openssl-fips-x.x.x.tar.gz` from
   https://www.openssl.org/source/
2. Extract source to `openssl-fips` folder
3. ``cd openssl-fips && ./config fipscanisterbuild --prefix=`pwd`/out``
   (NOTE: On OS X, you may want to run
    ``./Configure darwin64-x86_64-cc --prefix=`pwd`/out`` if you are going to
    build x64-mode io.js)
4. `make -j && make install`
5. Get into io.js checkout folder
6. `./configure --openssl-fips=/path/to/openssl-fips/out`
7. Build io.js with `make -j`
8. Verify with `node -p "process.versions.openssl"` (`1.0.2a-fips`)

Fix: https://github.com/joyent/node/issues/25463
PR-URL: https://github.com/nodejs/io.js/pull/1890
Reviewed-By: Rod Vagg <rod@vagg.org>
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
README.md
common.gypi
configure
deps/openssl/fips/fipscc [new file with mode: 0755]
deps/openssl/fips/fipsld [new file with mode: 0755]
deps/openssl/openssl.gyp
node.gyp
src/node_crypto.cc