Skip to content

Conversation

y82
Copy link
Contributor

@y82 y82 commented Sep 4, 2025

Proposed changes

This is a major rework of https://docs.nginx.com/nginx/fips-compliance-nginx-plus/, in particular:

  • FIPS 140-3 compliance
  • rewritten procedures acc. to rhel 9 and openssl3
  • intro added
  • fips complaint vs fips validated added
  • list of industries and countries added
  • list of nist certificates updated

work that still in progress:

  • some sample/test command specific for FIPS140-3
  • algs comparison FIPS140-2 vs FIPS140-3

Testing:
RHEL 9
Ubuntu 24.04 (not fips3 certified)
Ubuntu 22.04 (FIPS3 certified)

Reviewing hint: I'd suggest reviewing "from scratch" and ignore the diff - it was heavily rewritten

Checklist

Before sharing this pull request, I completed the following checklist:

Footnotes

  1. Potentially sensitive information includes personally identify information (PII), authentication credentials, and live URLs. Refer to the style guide for guidance about placeholder content.

@y82 y82 requested a review from a team as a code owner September 4, 2025 16:14
@y82 y82 self-assigned this Sep 4, 2025
@github-actions github-actions bot added documentation Improvements or additions to documentation product/nginx-plus Issues related to NGINX Plus (and NGINX Open Source in docs.nginx.com) labels Sep 4, 2025
@y82 y82 merged commit a7c21e4 into nginx:main Sep 12, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation product/nginx-plus Issues related to NGINX Plus (and NGINX Open Source in docs.nginx.com)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant