Merge pull request #1928 from SUSE/for-deploy-6

🤖: Update build recipes for SP6
SUSE · Oct 30, 2024 · 1f32207 · 1f32207
2 parents 00d7d30 + c271ef7
commit 1f32207
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/base-fips-image/Dockerfile b/base-fips-image/Dockerfile
@@ -51,8 +51,9 @@ LABEL io.artifacthub.package.readme-url="%SOURCEURL%/README.md"
 LABEL usage="This container should only be used on a FIPS enabled host (fips=1 on kernel cmdline)."
 RUN set -euo pipefail; update-crypto-policies --no-reload --set FIPS
 
-ENV OPENSSL_FIPS=1
-ENV OPENSSL_FORCE_FIPS_MODE=1
-ENV LIBGCRYPT_FORCE_FIPS_MODE=1
 ENV GNUTLS_FORCE_FIPS_MODE=1
+ENV LIBGCRYPT_FORCE_FIPS_MODE=1
 ENV LIBICA_FIPS_FLAG=1
+ENV NSS_FIPS=1
+ENV OPENSSL_FIPS=1
+ENV OPENSSL_FORCE_FIPS_MODE=1
diff --git a/base-fips-image/base-fips-image.changes b/base-fips-image/base-fips-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Oct 30 09:11:23 UTC 2024 - SUSE Update Bot <[email protected]>
+
+- enforce fips mode for NSS
+
 -------------------------------------------------------------------
 Fri Oct 11 15:13:29 UTC 2024 - SUSE Update Bot <[email protected]>