Russell Jones 09241c635e Added support for FedRAMP/FIPS 140-2. ...

Added "--fips" flag to "teleport start" command which can start
Enterprise in FedRAMP/FIPS 140-2 mode.

In FIPS mode, Teleport configures the TLS and SSH servers with FIPS
compliant cryptographic algorithms. In FIPS mode, if non-compliant
algorithms are chosen, Teleport will fail to start. In addition,
Teleport checks if the binary was compiled against an approved
cryptographic module (BoringCrypto) and fails to start if it was not.
If a client, like tsh, tries to use non-FIPS encryption, like NaCl,
those requests are also rejected.

2019-05-07 12:51:02 -07:00

..

modules_test.go

Added support for FedRAMP/FIPS 140-2.

2019-05-07 12:51:02 -07:00

modules.go

Added support for FedRAMP/FIPS 140-2.

2019-05-07 12:51:02 -07:00