// Copyright 2024 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

// Package fips140tls controls whether crypto/tls requires FIPS-approved settings.
package fips140tls import ( ) var required atomic.Bool func init() { if fips140.Enabled { Force() } } // Force forces crypto/tls to restrict TLS configurations to FIPS-approved settings. // By design, this call is impossible to undo (except in tests). func () { required.Store(true) } // Required reports whether FIPS-approved settings are required. // // Required is true if FIPS 140-3 mode is enabled with GODEBUG=fips140=on, or if // the crypto/tls/fipsonly package is imported by a Go+BoringCrypto build. func () bool { return required.Load() } func () { required.Store(false) }