fipstls

Documentation

Overview

Package fipstls allows control over whether crypto/tls requires FIPS-approved settings. This package's effects are independent of the use of the BoringCrypto implementation.

Index

• func Abandon()
• func Force()
• func Required() bool

Functions

func Abandon

func Abandon()

Abandon allows non-FIPS-approved settings. If called from a non-test binary, it panics.

func Force

func Force()

Force forces crypto/tls to restrict TLS configurations to FIPS-approved settings. By design, this call is impossible to undo (except in tests).

Note that this call has an effect even in programs using standard crypto (that is, even when Enabled = false).

func Required

func Required() bool

Required reports whether FIPS-approved settings are required.