debian-mirror-gitlab/lib/gitlab/fips.rb

33 lines
1.1 KiB
Ruby
Raw Normal View History

2022-05-07 20:08:51 +05:30
# rubocop: disable Naming/FileName
# frozen_string_literal: true
module Gitlab
class FIPS
# A simple utility class for FIPS-related helpers
2022-06-21 17:19:12 +05:30
Technology = Gitlab::SSHPublicKey::Technology
SSH_KEY_TECHNOLOGIES = [
Technology.new(:rsa, SSHData::PublicKey::RSA, [3072, 4096], %w(ssh-rsa)),
Technology.new(:dsa, SSHData::PublicKey::DSA, [], %w(ssh-dss)),
Technology.new(:ecdsa, SSHData::PublicKey::ECDSA, [256, 384, 521], %w(ecdsa-sha2-nistp256 ecdsa-sha2-nistp384 ecdsa-sha2-nistp521)),
Technology.new(:ed25519, SSHData::PublicKey::ED25519, [256], %w(ssh-ed25519)),
Technology.new(:ecdsa_sk, SSHData::PublicKey::SKECDSA, [256], %w(sk-ecdsa-sha2-nistp256@openssh.com)),
Technology.new(:ed25519_sk, SSHData::PublicKey::SKED25519, [256], %w(sk-ssh-ed25519@openssh.com))
].freeze
2022-07-23 23:45:48 +05:30
OPENSSL_DIGESTS = %i(SHA1 SHA256 SHA384 SHA512).freeze
2022-05-07 20:08:51 +05:30
class << self
# Returns whether we should be running in FIPS mode or not
#
# @return [Boolean]
def enabled?
2022-07-23 23:45:48 +05:30
::Labkit::FIPS.enabled?
2022-05-07 20:08:51 +05:30
end
end
end
end
# rubocop: enable Naming/FileName