Golang with FIPS-140-2 certified SLE BCI openssl

[dirkmueller]

SUSE Linux Enterprise Server 15 SP4 and SP5 has shipped in the Development Tools module a variant of the golang compilersuite that produces crypto bindings to libopenssl. As there is a FIPS-140-2 certified openssl available in the SLE Security Certifications Module, this can be used to produce fully FIPS-140-2 compatible golang binaries.

The following go compiler versions are available currently:

• go1.19-openssl
• go1.20-openssl

The go1.21-openssl package is currently under development. Of course the SLE BCI team has been providing those as BCI containers as well. so instead of using

FROM registry.suse.com/bci/golang:1.20

in your Containerfile or Dockerfile, you can instead use

FROM registry.suse.com/bci/golang:1.20-openssl

and as long as you build a dynamically linked binary, it will use the system provided openssl library to inherit the FIPS-140-2 compatibility.

As usual, for convenience SLE BCI is also providing the versions under registry.suse.com/bci/golang:stable-openssl and registry.suse.com/bci/golang:oldstable-openssl as well, so you don't need to update your build pipeline with new version when they come out.

Also see the corresponding announcement on SUSE Communities.