René's URL Explorer Experiment


Title: crypto: add FIPS indicator diagnostics and strict mode by panva · Pull Request #65645 · nodejs/node · GitHub

Open Graph Title: crypto: add FIPS indicator diagnostics and strict mode by panva · Pull Request #65645 · nodejs/node

X Title: crypto: add FIPS indicator diagnostics and strict mode by panva · Pull Request #65645 · nodejs/node

Description: OpenSSL FIPS providers can be configured to permit operations that are not FIPS approved, but Node.js currently gives users neither visibility into when this occurs nor a way to reject those operations when they cannot control the provider configuration. FIPS indicator callback makes both possible, giving us opt-in diagnostics for observability and a strict --force-fips mode for runtime enforcement without changing existing defaults or adding callback overhead unless requested. This adds --enable-fips-indicator-events, which installs the callback during startup and publishes best-effort events on the crypto.fips.indicator diagnostics channel. This also extends --force-fips with optional provider and strict modes (suggest better names if you want?). provider preserves the FIPS provider's configured handling of non-approved operations and remains the default, including for the bare --force-fips form. strict rejects non-approved operations reported through the indicator callback, independently of whether diagnostics are enabled.

Open Graph Description: OpenSSL FIPS providers can be configured to permit operations that are not FIPS approved, but Node.js currently gives users neither visibility into when this occurs nor a way to reject those operat...

X Description: OpenSSL FIPS providers can be configured to permit operations that are not FIPS approved, but Node.js currently gives users neither visibility into when this occurs nor a way to reject those operat...

Opengraph URL: https://github.com/nodejs/node/pull/65645

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:2021304a-ebc0-4028-fca3-002aa3af924b
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idC992:2037A8:730F9:99227:6AED32F1
html-safe-nonce88c6d7d0c2b29c3e4b8651806cb567da4716f1998e04a78595e716764b298f0a
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDOTkyOjIwMzdBODo3MzBGOTo5OTIyNzo2QUVEMzJGMSIsInZpc2l0b3JfaWQiOiI2OTA1NTI0Njk0NjI2OTM5NjMzIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac404530711dcaa9ef22abd545e3e3e4be27ad5b253fdd464b950dbf0d19103c35
hovercard-subject-tagpull_request:4391506009
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/nodejs/node/pull/65645/files
twitter:imagehttps://avatars.githubusercontent.com/u/241506?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/241506?s=400&v=4
og:image:altOpenSSL FIPS providers can be configured to permit operations that are not FIPS approved, but Node.js currently gives users neither visibility into when this occurs nor a way to reject those operat...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Nonee51d0b7b5ab34b1688c05b54c3ed17b8658b2fa9bca973a9c740683ccb12cf4a
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/nodejs/node git https://github.com/nodejs/node.git
octolytics-dimension-user_id9950313
octolytics-dimension-user_loginnodejs
octolytics-dimension-repository_id27193779
octolytics-dimension-repository_nwonodejs/node
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id27193779
octolytics-dimension-repository_network_root_nwonodejs/node
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release59ebb7b901cc154ecc179a44f266fcf69f343b30
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/nodejs/node/pull/65645/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65645%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65645%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=nodejs%2Fnode
Reloadhttps://github.com/nodejs/node/pull/65645/files
Reloadhttps://github.com/nodejs/node/pull/65645/files
Reloadhttps://github.com/nodejs/node/pull/65645/files
nodejshttps://github.com/nodejs
nodehttps://github.com/nodejs/node
Codehttps://github.com/nodejs/node
Issues656 (656)https://github.com/nodejs/node/issues
Pull requests665 (665)https://github.com/nodejs/node/pulls
Actionshttps://github.com/nodejs/node/actions
Projectshttps://github.com/nodejs/node/projects
Security and qualityhttps://github.com/nodejs/node/security
Insightshttps://github.com/nodejs/node/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fnodejs%2Fnode%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fnodejs%2Fnode%2Fissues%2Fnew%2Fchoose
panvahttps://github.com/panva
nodejs:mainhttps://github.com/nodejs/node/tree/main
panva:crypto-fips-indicator-callbackhttps://github.com/panva/node/tree/crypto-fips-indicator-callback
Conversation 21 https://github.com/nodejs/node/pull/65645
Commits 12 https://github.com/nodejs/node/pull/65645/commits
Checks 42 https://github.com/nodejs/node/pull/65645/checks
Files changed https://github.com/nodejs/node/pull/65645/files
Please reload this pagehttps://github.com/nodejs/node/pull/65645/files
crypto: add FIPS indicator diagnostics and strict mode https://github.com/nodejs/node/pull/65645/files#top
Show all changes 12 commits https://github.com/nodejs/node/pull/65645/files
debb49a crypto: add FIPS indicator diagnostics channel panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/debb49a8999a97c1ff6b027bb680b870c1a4bd00
3826393 crypto: add strict mode to --force-fips panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/38263930851d9776593c555fd95a1e71913dabab
077a047 fixup! crypto: add FIPS indicator diagnostics channel panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/077a0472dc913da34acd43162049cf8dd2a77457
4883a5d fixup! crypto: add FIPS indicator diagnostics channel panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/4883a5d93cf647f5539aacd34edf825eaaf7d25d
e3ba181 fixup! crypto: add FIPS indicator diagnostics channel panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/e3ba181e8157283c1c3884f6ad18b8c180ef4363
8a05fbc fixup! crypto: add FIPS indicator diagnostics channel panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/8a05fbc53c1e62b6f0790eb3015df667ac2ebbca
b83f3bf fixup! crypto: add strict mode to --force-fips panva Aug 29, 2026 https://github.com/nodejs/node/pull/65645/commits/b83f3bf8e16032a82cc3d2b2cd632e9507c26a04
4e83524 fixup! crypto: add strict mode to --force-fips panva Sep 1, 2026 https://github.com/nodejs/node/pull/65645/commits/4e8352499279ac667a224cc7f934ab297ff05d7d
2a3fa01 fixup! crypto: add strict mode to --force-fips panva Sep 1, 2026 https://github.com/nodejs/node/pull/65645/commits/2a3fa01b6e4ac1b47c62b1bcce4f26d0098876db
452e413 fixup! crypto: add FIPS indicator diagnostics channel panva Sep 1, 2026 https://github.com/nodejs/node/pull/65645/commits/452e4134ee90ba22927a234c579367c19072724b
a4dd0cb fixup! crypto: add strict mode to --force-fips panva Sep 1, 2026 https://github.com/nodejs/node/pull/65645/commits/a4dd0cb2202f5cf2f5044f2af3f6a2efc6fc516d
8fa6607 fixup! crypto: add FIPS indicator diagnostics channel panva Sep 1, 2026 https://github.com/nodejs/node/pull/65645/commits/8fa6607959636425301473bacc33f6ac47d9add0
Clear filters https://github.com/nodejs/node/pull/65645/files
Please reload this pagehttps://github.com/nodejs/node/pull/65645/files
Please reload this pagehttps://github.com/nodejs/node/pull/65645/files
cli.md https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
crypto.md https://github.com/nodejs/node/pull/65645/files#diff-52a58775d8a5519e232893c0d176d1a7461037007ac2c8f25a2aa803b8304454
diagnostics_channel.md https://github.com/nodejs/node/pull/65645/files#diff-d9c2d2d884d1dea00c82e7f00176441f9524573b6429fd83bf3835cd09a5b029
node.1 https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
per_thread.js https://github.com/nodejs/node/pull/65645/files#diff-38d3873e06750436cd724af3eb60026b1bb8da914467797cf7ef7a3c94bd74ce
pre_execution.js https://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
crypto_util.cc https://github.com/nodejs/node/pull/65645/files#diff-44f169afcf633347349f172323ec642b8f25c09502990d488f161c1cb37f12b7
crypto_util.h https://github.com/nodejs/node/pull/65645/files#diff-d1a1eed30455ad332171862178da6cac3f53edc27effda596dc8816fe12eac07
env_properties.h https://github.com/nodejs/node/pull/65645/files#diff-3c4caf9223a0c3a6efbb87207e13f002d4209a6c4db5d9c113ac5d7112ef4474
node.cc https://github.com/nodejs/node/pull/65645/files#diff-6c1386cbc6e4a11941649af31a0257d5c3e40b5f41223cdddf87ab2e984b705a
node_options.cc https://github.com/nodejs/node/pull/65645/files#diff-d0b7433f8ca620eba56fc39f79429c73e2b3f061ca6d27583132a37b788b8aa8
node_options.h https://github.com/nodejs/node/pull/65645/files#diff-a6dd6c44925932d3134081da80ed07216f5f66449f540442835557616bcd14f9
test-cli-node-print-help.js https://github.com/nodejs/node/pull/65645/files#diff-902105bff5d0d8dd09768e709b6e5171cd0956a75389194dc79c79fec44b15dc
test-crypto-fips-indicator-strict.js https://github.com/nodejs/node/pull/65645/files#diff-404b4759a738ba6fb80f1fc0ce97eb8c24e6b2c9895ca77b76c8a58d424d1d27
test-crypto-fips.js https://github.com/nodejs/node/pull/65645/files#diff-46eceebadd756413a55b68a7d960e5c3dba8ebb9acf34f4f608b3debe2355327
test-diagnostics-channel-crypto-fips-indicator.js https://github.com/nodejs/node/pull/65645/files#diff-c8d7c8b0f5416c5dd1b2bf52f92da2fae4e817ad238bcdcd4f70cd8ed4dd5cd7
test-process-env-allowed-flags-are-documented.js https://github.com/nodejs/node/pull/65645/files#diff-ea2dbecfc7bc3370cd9ea1bcb4bc5c60961645f8f6add046f3a7b32d08bac815
crypto.d.ts https://github.com/nodejs/node/pull/65645/files#diff-517ab8c8dbbbf45a3eabdd84580614e87af93ea1b3dcd5323abd951eeb9b43bf
doc/api/cli.mdhttps://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
View file https://github.com/panva/node/blob/8fa6607959636425301473bacc33f6ac47d9add0/doc/api/cli.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/65645/{{ revealButtonHref }}
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
Please reload this pagehttps://github.com/nodejs/node/pull/65645/files
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
https://github.com/nodejs/node/pull/65645/files#diff-7349c17bce4d97526eefcb6f8291d617e7edb92ed9927fd3b9264e8014fc4e7c
doc/api/crypto.mdhttps://github.com/nodejs/node/pull/65645/files#diff-52a58775d8a5519e232893c0d176d1a7461037007ac2c8f25a2aa803b8304454
View file https://github.com/panva/node/blob/8fa6607959636425301473bacc33f6ac47d9add0/doc/api/crypto.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/65645/{{ revealButtonHref }}
https://github.com/nodejs/node/pull/65645/files#diff-52a58775d8a5519e232893c0d176d1a7461037007ac2c8f25a2aa803b8304454
https://github.com/nodejs/node/pull/65645/files#diff-52a58775d8a5519e232893c0d176d1a7461037007ac2c8f25a2aa803b8304454
https://github.com/nodejs/node/pull/65645/files#diff-52a58775d8a5519e232893c0d176d1a7461037007ac2c8f25a2aa803b8304454
https://github.com/nodejs/node/pull/65645/files#diff-52a58775d8a5519e232893c0d176d1a7461037007ac2c8f25a2aa803b8304454
doc/api/diagnostics_channel.mdhttps://github.com/nodejs/node/pull/65645/files#diff-d9c2d2d884d1dea00c82e7f00176441f9524573b6429fd83bf3835cd09a5b029
View file https://github.com/panva/node/blob/8fa6607959636425301473bacc33f6ac47d9add0/doc/api/diagnostics_channel.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/65645/{{ revealButtonHref }}
https://github.com/nodejs/node/pull/65645/files#diff-d9c2d2d884d1dea00c82e7f00176441f9524573b6429fd83bf3835cd09a5b029
https://github.com/nodejs/node/pull/65645/files#diff-d9c2d2d884d1dea00c82e7f00176441f9524573b6429fd83bf3835cd09a5b029
https://github.com/nodejs/node/pull/65645/files#diff-d9c2d2d884d1dea00c82e7f00176441f9524573b6429fd83bf3835cd09a5b029
https://github.com/nodejs/node/pull/65645/files#diff-d9c2d2d884d1dea00c82e7f00176441f9524573b6429fd83bf3835cd09a5b029
doc/node.1https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
View file https://github.com/panva/node/blob/8fa6607959636425301473bacc33f6ac47d9add0/doc/node.1
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/65645/{{ revealButtonHref }}
https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
https://github.com/nodejs/node/pull/65645/files#diff-6319d8667880c119404aad5631a45e33a1ee70a4201282049872ac9d5d6f9295
lib/internal/process/per_thread.jshttps://github.com/nodejs/node/pull/65645/files#diff-38d3873e06750436cd724af3eb60026b1bb8da914467797cf7ef7a3c94bd74ce
View file https://github.com/panva/node/blob/8fa6607959636425301473bacc33f6ac47d9add0/lib/internal/process/per_thread.js
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/65645/{{ revealButtonHref }}
https://github.com/nodejs/node/pull/65645/files#diff-38d3873e06750436cd724af3eb60026b1bb8da914467797cf7ef7a3c94bd74ce
https://github.com/nodejs/node/pull/65645/files#diff-38d3873e06750436cd724af3eb60026b1bb8da914467797cf7ef7a3c94bd74ce
lib/internal/process/pre_execution.jshttps://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
View file https://github.com/panva/node/blob/8fa6607959636425301473bacc33f6ac47d9add0/lib/internal/process/pre_execution.js
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/65645/{{ revealButtonHref }}
https://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
https://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
https://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
https://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
https://github.com/nodejs/node/pull/65645/files#diff-f996aabedc7259a2c541d8420902c3556f772f9d1f9c3861d1b90f421bc121ab
Please reload this pagehttps://github.com/nodejs/node/pull/65645/files
Please reload this pagehttps://github.com/nodejs/node/pull/65645/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.