[apisix] branch master updated: docs: translate the document of support-fips-in-apisix into Chinese (#10115)

[tr...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

traky pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix.git


The following commit(s) were added to refs/heads/master by this push:
     new 4f9301c7e docs: translate the document of support-fips-in-apisix into Chinese (#10115)
4f9301c7e is described below

commit 4f9301c7ec6f99bbd33cf6629cc95a76a2888550
Author: zhangyuthink <35...@users.noreply.github.com>
AuthorDate: Fri Sep 8 10:04:52 2023 +0800

    docs: translate the document of support-fips-in-apisix into Chinese (#10115)
    
    * 翻译文档support-fips-in-apisix
    
    * 翻译文档support-fips-in-apisix，调整一些细节，修改config.json配置
    
    * Update docs/zh/latest/support-fips-in-apisix.md
    
    Co-authored-by: Sylvia <39...@users.noreply.github.com>
    
    * 翻译文档support-fips-in-apisix，调整一些细节
    
    ---------
    
    Co-authored-by: ZhangYu <19...@qq.com>
    Co-authored-by: Sylvia <39...@users.noreply.github.com>
---
 docs/zh/latest/config.json               |  4 +++
 docs/zh/latest/support-fips-in-apisix.md | 60 ++++++++++++++++++++++++++++++++
 2 files changed, 64 insertions(+)

diff --git a/docs/zh/latest/config.json b/docs/zh/latest/config.json
index 8585bf606..9c0cce7e9 100644
--- a/docs/zh/latest/config.json
+++ b/docs/zh/latest/config.json
@@ -216,6 +216,10 @@
           "type": "doc",
           "id": "building-apisix"
         },
+        {
+          "type": "doc",
+          "id": "support-fips-in-apisix"
+        },
         {
           "type": "doc",
           "id": "external-plugin"
diff --git a/docs/zh/latest/support-fips-in-apisix.md b/docs/zh/latest/support-fips-in-apisix.md
new file mode 100644
index 000000000..92facc21f
--- /dev/null
+++ b/docs/zh/latest/support-fips-in-apisix.md
@@ -0,0 +1,60 @@
+---
+id: support-fips-in-apisix
+title: 通过 OpenSSL 3.0 使 APISIX 支持 FIPS 模式
+keywords:
+  - API 网关
+  - Apache APISIX
+  - 贡献代码
+  - 构建 APISIX
+  - OpenSSL 3.0 FIPS
+description: 本文将介绍如何在 Apache APISIX 中使用 OpenSSL 3.0 来编译 apisix-base，即可启用 FIPS 模式。
+---
+
+<!--
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+-->
+
+目前，OpenSSL 3.0 [支持了](https://www.openssl.org/blog/blog/2022/08/24/FIPS-validation-certificate-issued/) [FIPS](https://en.wikipedia.org/wiki/FIPS_140-2) 模式。为了在 APISIX 中支持 FIPS 模式，你应该使用 OpenSSL 3.0 来编译 apisix-base。
+
+## 编译
+
+如果你需要使用 OpenSSL 3.0 来编译 apisix-base，请以 root 用户角色来执行以下命令：
+
+```bash
+cd $(mktemp -d)
+OPENSSL3_PREFIX=${OPENSSL3_PREFIX-/usr/local}
+apt install -y build-essential
+git clone https://github.com/openssl/openssl
+cd openssl
+./Configure --prefix=$OPENSSL3_PREFIX/openssl-3.0 enable-fips
+make install
+echo $OPENSSL3_PREFIX/openssl-3.0/lib64 > /etc/ld.so.conf.d/openssl3.conf
+ldconfig
+$OPENSSL3_PREFIX/openssl-3.0/bin/openssl fipsinstall -out $OPENSSL3_PREFIX/openssl-3.0/ssl/fipsmodule.cnf -module $OPENSSL3_PREFIX/openssl-3.0/lib64/ossl-modules/fips.so
+sed -i 's@# .include fipsmodule.cnf@.include '"$OPENSSL3_PREFIX"'/openssl-3.0/ssl/fipsmodule.cnf@g; s/# \(fips = fips_sect\)/\1\nbase = base_sect\n\n[base_sect]\nactivate=1\n/g' $OPENSSL3_PREFIX/openssl-3.0/ssl/openssl.cnf
+cd ..
+
+export cc_opt="-I$OPENSSL3_PREFIX/openssl-3.0/include"
+export ld_opt="-L$OPENSSL3_PREFIX/openssl-3.0/lib64 -Wl,-rpath,$OPENSSL3_PREFIX/openssl-3.0/lib64"
+
+wget https://raw.githubusercontent.com/api7/apisix-build-tools/master/build-apisix-base.sh
+chmod +x build-apisix-base.sh
+./build-apisix-base.sh latest
+```
+
+apisix-base 将安装在 `/usr/local/openresty-debug`。