Does current GRPC GO TLS support FIPS certification? Will GRPC GO use openssl in the future?

[Steven Jiang]

Hi,

Our customer requires our products have FIPS certification. We are using GRPC GO (1.0) libs for TLS transportation. Does current GRPC GO TLS implementation support FIPS certification? Will GRPC GO use openssl in the future? 

Thanks

Steven

[Doug Fawley]

gRPC-Go implements TLS with crypto/tls from the standard packages, which AFAICT isn't FIPS-certified.

We don't have any plans to switch gRPC to OpenSSL.  However, TransportCredentials (godoc) is a public interface, which could be implemented by any FIPS-certified package, and used by the Server and Client.

Thanks,

Doug