@@ -60,18 +60,18 @@ RUN tdnf install -y \
6060# Configure OpenSSL for FIPS-compliant cipher suites if $ENABLE_FIPS_MODE
6161RUN if [ "$ENABLE_FIPS_MODE" = "true" ]; then \
6262 echo "=== FIPS MODE ENABLED - Configuring OpenSSL ===" && \
63- cat /etc/ssl /openssl.cnf && \
64- echo "" >> /etc/ssl /openssl.cnf && \
65- echo "openssl_conf = openssl_init" >> /etc/ssl /openssl.cnf && \
66- echo "[openssl_init]" >> /etc/ssl /openssl.cnf && \
67- echo "ssl_conf = ssl_sect" >> /etc/ssl /openssl.cnf && \
68- echo "[ssl_sect]" >> /etc/ssl /openssl.cnf && \
69- echo "system_default = system_default_sect" >> /etc/ssl /openssl.cnf && \
70- echo "[system_default_sect]" >> /etc/ssl /openssl.cnf && \
71- echo "CipherString = $OPENSSL_CIPHER_STRING" >> /etc/ssl /openssl.cnf && \
72- echo "Groups = $OPENSSL_GROUPS" >> /etc/ssl /openssl.cnf && \
63+ cat /etc/pki/tls /openssl.cnf && \
64+ echo "" >> /etc/pki/tls /openssl.cnf && \
65+ echo "openssl_conf = openssl_init" >> /etc/pki/tls /openssl.cnf && \
66+ echo "[openssl_init]" >> /etc/pki/tls /openssl.cnf && \
67+ echo "ssl_conf = ssl_sect" >> /etc/pki/tls /openssl.cnf && \
68+ echo "[ssl_sect]" >> /etc/pki/tls /openssl.cnf && \
69+ echo "system_default = system_default_sect" >> /etc/pki/tls /openssl.cnf && \
70+ echo "[system_default_sect]" >> /etc/pki/tls /openssl.cnf && \
71+ echo "CipherString = $OPENSSL_CIPHER_STRING" >> /etc/pki/tls /openssl.cnf && \
72+ echo "Groups = $OPENSSL_GROUPS" >> /etc/pki/tls /openssl.cnf && \
7373 echo "=== FIPS Configuration Applied ===" && \
74- tail -15 /etc/ssl /openssl.cnf; \
74+ tail -15 /etc/pki/tls /openssl.cnf; \
7575 else \
7676 echo "=== FIPS MODE DISABLED ==="; \
7777 fi
0 commit comments