FIPS 140-2

Kong Enterprise provides a FIPS 140-2 compliant package for Ubuntu 20.04. This package provides compliance for the core Kong Gateway product only.

The package replaces the primary library in Kong Gateway, OpenSSL, with , which at its core uses the FIPS 140-2 validated BoringCrypto for cryptographic operations.

The only supported Kong Gateway distribution is based on Ubuntu 20.04 and can be installed with the package distinctively named .

To install the Kong Gateway FIPS package use:

You can also use an environment variable:

Migrating from non-FIPS to FIPS mode and backwards is not supported.