[GH-ISSUE #5330] Flag OpenSSL module to use FIPS mode #3171

New issue

Open

opened 2026-02-26 07:38:01 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 07:38:01 +03:00

Owner

Originally created by @DrkCorners on GitHub (Feb 19, 2026).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5330

Is your feature request related to a problem? Please describe.
It would be really nice to set NPM in "FIPS Mode". This would help significantly with compliance issues and putting non-compliant services behind NPM to ensure that the communications were compliant.

It looks like OpenSSL has a flag that can be set to use the FIPS certified module (https://docs.openssl.org/master/man7/fips_module/#making-all-applications-use-the-fips-module-by-default).

Describe the solution you'd like
As I think NPM uses OpenSSL for its cryptographic functions, can the FIPS module be included and a switch (in GUI or in docker compose) be set to use only FIPS algorithms/libraries?

Describe alternatives you've considered
I have not found any fully open source reverse proxy that has a FIPS mode. All that have an option seems to be locked behind a paywall that includes a bunch of other features that are overly complex and painful.

Additional context

Originally created by @DrkCorners on GitHub (Feb 19, 2026). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5330  **Is your feature request related to a problem? Please describe.** It would be really nice to set NPM in "FIPS Mode". This would help significantly with compliance issues and putting non-compliant services behind NPM to ensure that the communications were compliant. It looks like OpenSSL has a flag that can be set to use the FIPS certified module (https://docs.openssl.org/master/man7/fips_module/#making-all-applications-use-the-fips-module-by-default). **Describe the solution you'd like** As I think NPM uses OpenSSL for its cryptographic functions, can the FIPS module be included and a switch (in GUI or in docker compose) be set to use only FIPS algorithms/libraries? **Describe alternatives you've considered** I have not found any fully open source reverse proxy that has a FIPS mode. All that have an option seems to be locked behind a paywall that includes a bunch of other features that are overly complex and painful. **Additional context**

kerem added the

enhancement

label

2026-02-26 07:38:01 +03:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#3171

No description provided.

Rows
Columns