core: FIPS (#9683)

Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

internal/crypto/backend/fips_disabled.go

@@ -0,0 +1,5 @@
+//go:build requirefips
+
+package backend
+
+var FipsEnabled = true

internal/crypto/backend/fips_enabled.go

@@ -0,0 +1,5 @@
+//go:build !requirefips
+
+package backend
+
+var FipsEnabled = false

internal/crypto/backend/openssl_disabled.go

@@ -0,0 +1,5 @@
+//go:build !goexperiment.systemcrypto
+
+package backend
+
+var OpensslEnabled = false

internal/crypto/backend/openssl_enabled.go

@@ -0,0 +1,5 @@
+//go:build goexperiment.systemcrypto
+
+package backend
+
+var OpensslEnabled = true

internal/crypto/backend/openssl_version.go

@@ -0,0 +1,17 @@
+package backend
+
+import (
+	"bytes"
+	"os/exec"
+)
+
+func OpensslVersion() string {
+	cmd := exec.Command("openssl", "version")
+	var out bytes.Buffer
+	cmd.Stdout = &out
+	err := cmd.Run()
+	if err != nil {
+		return ""
+	}
+	return out.String()
+}