mirror of https://github.com/vbatts/go-fips.git
39 lines
875 B
Go
39 lines
875 B
Go
// +build fips
|
|
|
|
package fips
|
|
|
|
/*
|
|
#include <stdlib.h>
|
|
#include <openssl/crypto.h>
|
|
#include <openssl/err.h>
|
|
#cgo LDFLAGS: -lcrypto
|
|
*/
|
|
import "C"
|
|
import "errors"
|
|
|
|
// Check whether is FIPS mode is on
|
|
func Mode() (ONOFF, error) {
|
|
return ONOFF(C.FIPS_mode()), nil
|
|
}
|
|
|
|
// Attempt to turn on FIPS for the context of this executable
|
|
func ModeSet(mode ONOFF) (ONOFF, error) {
|
|
o := ONOFF(C.FIPS_mode_set(C.int(mode)))
|
|
if o != mode {
|
|
return o, errors.New(LastError())
|
|
}
|
|
return o, nil
|
|
}
|
|
|
|
// returns error:[error code]:[library name]:[function name]:[reason string]
|
|
// this error code can also be read with `openssl errstr <error code>`
|
|
func LastError() string {
|
|
buf := C.malloc(1024)
|
|
e := C.ERR_get_error() // a C.ulong
|
|
C.ERR_load_crypto_strings()
|
|
defer C.ERR_free_strings()
|
|
C.ERR_error_string_n(e, (*C.char)(buf), 1024)
|
|
defer C.free(buf)
|
|
return C.GoString((*C.char)(buf))
|
|
}
|