Conversation
stafot
requested review from
DSchalla,
angeloskyratzakos,
esarafianou and
harshilsharma63
esarafianou
left a comment
esarafianou
left a comment
There was a problem hiding this comment.
Thanks Stavro, a few comments:
harshilsharma63
left a comment
harshilsharma63
left a comment
There was a problem hiding this comment.
Only change required is not returning that error there as in comment
|
Deferring the Makefile changes related to FIPS to @esarafianou , but boards changes look good. |
esarafianou
left a comment
esarafianou
left a comment
There was a problem hiding this comment.
@stafot great work, I didn't know we were not building the Boards plugin during CI at all.
Just one comment for naming. It should stay Boards to distinguish itself from the community supported focalboard.
stafot
force-pushed
the
CLD-9417-build-boards-fips-compliant
branch
from
13ffe4c to
cd67501
Compare
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
Signed-off-by: Stavros Foteinopoulos <stafot@gmail.com>
agarciamontoro
force-pushed
the
CLD-9417-build-boards-fips-compliant
branch
from
eabd4a1 to
56e2903
Compare
|
Rebased this branch on top of the |
|
This PR has been automatically labelled "stale" because it hasn't had recent activity. |
|
Merged up to the |
|
This PR has been automatically labelled "stale" because it hasn't had recent activity. |
|
Merged up to the |
|
This PR has been automatically labelled "stale" because it hasn't had recent activity. |
|
Merged up to the |
6 participants
🔒 Add FIPS 140-2 Compliance Support for Mattermost Boards Plugin
Summary
This PR implements FIPS (Federal Information Processing Standards) 140-2 compliance for the Mattermost Boards plugin, enabling secure deployment in government and enterprise environments that require cryptographic validation.
Changes Made
🛠️ FIPS Build Infrastructure
Added FIPS build targets: server-fips, bundle-fips, dist-fips, dist-all
FIPS Docker integration: Uses cgr.dev/mattermost.com/go-msft-fips:1.24.6 for FIPS-validated Go compilation
Dual distribution support: Builds both regular and FIPS-compliant plugin bundles
🔧 Plugin Compatibility Fixes
Binary naming standardization: FIPS bundles now contain correctly named binaries (plugin-linux-amd64) for server compatibility
Fixed broken variable references: Resolved FOCALBOARD_PLUGIN_PATH → BOARD_PLUGIN_PATH inconsistencies
Updated Go version: Upgraded to Go 1.24.6 for latest security patches
Testing
✅ FIPS server compatibility: Tested with FIPS-enabled Mattermost server
✅ Plugin loading: Verified successful installation and startup
✅ Functionality: Confirmed full plugin operation in FIPS mode
✅ Security compliance: Maintains FIPS 140-2 cryptographic standards
Breaking Changes
None - fully backward compatible with existing installations.
Deployment
FIPS-compliant organizations can now deploy the Boards plugin using the -fips bundle variant while maintaining full functionality and security compliance.
Related: Part of broader FIPS compliance initiative across Mattermost plugin ecosystem.
Ticket Link
https://mattermost.atlassian.net/browse/CLD-9417