Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support to config fips state #69

Merged
merged 7 commits into from
Jul 21, 2023
Merged

Support to config fips state #69

merged 7 commits into from
Jul 21, 2023

Conversation

xumia
Copy link
Contributor

@xumia xumia commented Jun 25, 2023

Support to config fips state, allow to enable or enforce the FIPS.
When FIPS is enforced, you can only disable the FIPS by changing to non-enforced state and reboot the DUT.

HLD: https://github.com/sonic-net/SONiC/blob/master/doc/fips/SONiC-OpenSSL-FIPS-140-3-deployment.md
The FIPS deployment features are in the PR: sonic-net/SONiC#1372

Microsoft VSO: 25396267

scripts/hostcfgd Outdated Show resolved Hide resolved
@xumia xumia force-pushed the Support-Fips branch 2 times, most recently from 170072a to 5b52898 Compare July 6, 2023 08:24
@xumia xumia marked this pull request as ready for review July 6, 2023 08:37
@qiluo-msft
Copy link
Contributor

Please improve the PR description and provide the HLD link.

@xumia xumia merged commit 11a44d5 into sonic-net:master Jul 21, 2023
4 checks passed
@StormLiangMS
Copy link

@xumia could you help to create a separate PR to 202305? merge conflict.

xumia added a commit to xumia/sonic-host-services that referenced this pull request Oct 11, 2023
Support to config fips state, allow to enable or enforce the FIPS.
When FIPS is enforced, you can only disable the FIPS by changing to non-enforced state and reboot the DUT.

HLD: https://github.com/sonic-net/SONiC/blob/master/doc/fips/SONiC-OpenSSL-FIPS-140-3-deployment.md
StormLiangMS pushed a commit that referenced this pull request Oct 11, 2023
Support to config fips state, allow to enable or enforce the FIPS.
When FIPS is enforced, you can only disable the FIPS by changing to non-enforced state and reboot the DUT.

HLD: https://github.com/sonic-net/SONiC/blob/master/doc/fips/SONiC-OpenSSL-FIPS-140-3-deployment.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants