Securing web servers with robust cryptography is essential in today’s threat landscape. wolfProvider offers a seamless way to enhance nginx security by integrating wolfSSL’s high-performance cryptographic implementations through OpenSSL’s provider framework. This integration allows nginx to leverage wolfSSL’s FIPS cryptography without modifying code.
What is wolfProvider?
wolfProvider is an OpenSSL provider that integrates the wolfCrypt FIPS cryptographic library with OpenSSL’s provider framework. It allows applications using the OpenSSL API, such as nginx, to seamlessly leverage wolfSSL’s FIPS approved cryptographic implementations without modifying application code.
Supported nginx Versions
Our continuous integration testing confirms compatibility with the following nginx versions:
nginx master branch
nginx release-1.27.4
Key Benefits for nginx users
- Enhanced Security: Access to wolfSSL’s FIPS 140-2/3 validated cryptographic modules for compliance requirements
- Optimized Performance: Benefit from wolfSSL’s highly optimized cryptographic implementations
- Seamless Integration: No modifications to nginx or openssl, a simple config file change enables new wolfProvider integration
- Comprehensive Algorithm Support: Full suite of modern cryptographic algorithms including:
- AES (128/192/256-bit with ECB, CBC, CTR, GCM, CCM modes)
- RSA, RSA-PSS for signing, verification, and key operations
- ECC with ECDSA and ECDH support
- SHA-1, SHA-2, and SHA-3 family hash functions
Testing and Verification
Our GitHub Actions workflows automatically test the integration to validate the following functionality:
TLS handshakes complete successfully
HTTP/2 connections work properly
Stream and mail modules function correctly
All cryptographic operations perform as expected
Stay updated with wolfProvider for ongoing enhancements! If you have questions about any of the above, please contact us at facts@wolfSSL.com or call us at +1 425 245 8247.
Download wolfSSL Now