Skip to content

add FIPS version metadata for downstream packagers#3198

Open
goertzenator wants to merge 1 commit intoaws:mainfrom
goertzenator:add-fips-versions-metadata
Open

add FIPS version metadata for downstream packagers#3198
goertzenator wants to merge 1 commit intoaws:mainfrom
goertzenator:add-fips-versions-metadata

Conversation

@goertzenator
Copy link
Copy Markdown

Issues:

Resolves #3184

Description of changes:

Adds a json file FIPS_VERSIONS.json for identifying fips versions that have a validation certificate.

The immediate use case for this is packaging FIPS validated aws-lc in nixpkgs. nixpkgs can do automatic version updates, but for that to work there needs to be machine readable FIPS version information.

Call-outs:

n/a

Testing:

My in-progress aws-lc-fips-validated package updates correctly against this PR. When I temporarily removed the 2.0.0 line from FIPS_VERSIONS.json the package correctly picked version 1.1.0 and updated the hash accordingly. The package updated correctly again when I restored the 2.0.0 line.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

FIPS builds for nixpkgs

1 participant