v1.8.0

Changed

• Use OpenSSL 1.0.2u to support FIPS compliance.
  cyberark/conjur#1527
• Conjur can be configured to run in FIPS compliant or Non-FIPS compliant mode depending on requirements.
  FIPS Compliant mode is slightly slower then non-FIPS compliant.
  cyberark/conjur#1527
• Bump conjur-rack from 4.0.0 to 4.2.0 that consumes FIPS compliant slosilo.
  cyberark/conjur#1527
• Print login and authentication error to the log in INFO level.
  cyberark/conjur#1377
• Print proper message when user does not exist in authn or login request with
  default authenticator.
  cyberark/conjur#1655

Added

• Password changes (PUT /authn/:account/password) now produce audit events with
  message ID password. cyberark/conjur#1548
• API key rotations (PUT /:authenticator/:account/api_key) now produce audit events with
  message ID api-key. cyberark/conjur#1549
• All audit events now contain the IP address of the client that initiated the
  API request (e.g. [client@43868 ip="172.24.0.5"]).
  cyberark/conjur#1550
• Print Conjur server FIPS mode status. cyberark/conjur#1654

Security

• Updated rack to 2.2.3 to resolve CVE-2020-8184. cyberark/conjur#1643