Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Commit a965dda

Browse filesBrowse files
TrottMylesBorins
authored andcommitted
doc: simplify and clarify FIPS text in BUILDING.md
PR-URL: #17538 Fixes: #17536 Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com> Reviewed-By: Jon Moss <me@jonathanmoss.me>
1 parent 24dc57b commit a965dda
Copy full SHA for a965dda

File tree

Expand file treeCollapse file tree

1 file changed

+6
-10
lines changed
Open diff view settings
Filter options
Expand file treeCollapse file tree

1 file changed

+6
-10
lines changed
Open diff view settings
Collapse file

‎BUILDING.md‎

Copy file name to clipboardExpand all lines: BUILDING.md
+6-10Lines changed: 6 additions & 10 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -347,17 +347,13 @@ as `deps/icu` (You'll have: `deps/icu/source/...`)
347347

348348
## Building Node.js with FIPS-compliant OpenSSL
349349

350-
NOTE: Windows is not yet supported
350+
It is possible to build Node.js with the
351+
[OpenSSL FIPS module](https://www.openssl.org/docs/fipsnotes.html) on POSIX
352+
systems. Windows is not supported.
351353

352-
It is possible to build Node.js with
353-
[OpenSSL FIPS module](https://www.openssl.org/docs/fipsnotes.html).
354-
355-
**Note**: building in this way does **not** allow you to claim that the
356-
runtime is FIPS 140-2 validated. Instead you can indicate that the runtime
357-
uses a validated module. See the
358-
[security policy](http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1747.pdf)
359-
page 60 for more details. In addition, the validation for the underlying module
360-
is only valid if it is deployed in accordance with its
354+
Building in this way does not mean the runtime is FIPS 140-2 validated, but
355+
rather that the runtime uses a validated module. In addition, the validation for
356+
the underlying module is only valid if it is deployed in accordance with its
361357
[security policy](http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1747.pdf).
362358
If you need FIPS validated cryptography it is recommended that you read both
363359
the [security policy](http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1747.pdf)

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.