Repository navigation
How to build Node.js binary with FIPS-compliant OpenSSL? #753
Description
- Node.js Version: v6.11.1
- OS: 3.8.13-118.13.3.el6uek.x86_64
- Scope (install, code, runtime, meta, other?): install
- Module (and version) (if relevant):
Is it possible to build Node.js binary with FIPS support and install it on another machine?
I followed steps provided at https://github.com/nodejs/node/blob/master/BUILDING.md#building-nodejs-with-fips-compliant-openssl
These steps are working fine for me. But this will install node on the machine where it's being built.
Running
CONFIG_FLAGS="--openssl-fips=/usr/local/ssl/fips-2.0" make -j4 binary
after following steps listed at https://github.com/nodejs/node/blob/master/BUILDING.md#building-nodejs-with-fips-compliant-openssl seems to take care of building binary that can be installed on another compatible machine, but I want to make sure I'm not missing something here.
Thanks.
Activity
addaleax commentedon Jul 26, 2017
/cc @nodejs/crypto
sam-github commentedon Jul 26, 2017
I don't understand the question, you seem to have said everything worked, but you are wondering if you did it right?
Not sure why you used
CONFIG_FLAGS=instead of./configure ...raydenx commentedon Jul 26, 2017
Yes, I am wondering if I did it right.
binarytarget executes./configurewithoutopenssl-fipsoption. That's why I usedCONFIG_FLAGSgireeshpunathil commentedon Mar 13, 2018
@raydenx - is your issue still outstanding, or is it resolved? please let me know.
raydenx commentedon Mar 13, 2018
CONFIG_FLAGS="--openssl-fips=/usr/local/ssl/fips-2.0" make -j4 binaryworked for me. Noone really confirmed it is the right command but I will just assume yes.
gireeshpunathil commentedon Mar 15, 2018
/cc @mhdawson for confirmation.
gireeshpunathil commentedon Mar 23, 2018
./configure --helphas this section:So either your way or
./configure --openssl-fips=/usr/local/ssl/fips-2.0should work.Hope this helps.
gireeshpunathil commentedon Mar 26, 2018
closing as answered, please let me know if this is outstanding.