mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-15 17:11:30 +00:00
Julian Sommer
17 lines
525 B
Go
17 lines
525 B
Go
// Package fipsboot enforces FIPS 140-3 at startup via blank import in every binary.
|
|
// Requires GOFIPS140=v1.0.0 at build time; panics if GODEBUG=fips140=off disables
|
|
// the runtime FIPS mode.
|
|
package fipsboot
|
|
|
|
import (
|
|
"crypto/fips140"
|
|
)
|
|
|
|
func init() {
|
|
if !fips140.Enabled() {
|
|
//nolint:forbidigo // Refuse to start when the required FIPS mode is disabled.
|
|
panic("fipsboot: FIPS 140-3 mode is not enabled at runtime — refusing to start. " +
|
|
"Build with GOFIPS140=v1.0.0 and do not set GODEBUG=fips140=off.")
|
|
}
|
|
}
|