Please consider upgrading boringssl build

[xnox]

ztunnel currently has boringssl build still available.

Please consider upgrading it to version 2023042800 as per https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4953.pdf which received CVMP #4953 certificate on 1/27/2025 and is certified to the FIPS 140-3 standard.

This is still interesting, as it allows to create statically linked binaries with FIPS certification, in addition to the openssl in FIPS mode dynamic linking route.

The request for aws-lc fips static linking is at:

• tls-rustls-aws-ls-sys-fips build option #1323

[howardjohn]

This is blocked by the cloud flare library updating as far as I know. But would love to do it

[xnox]

This is blocked by the cloud flare library updating as far as I know. But would love to do it

fun! any pointers? can i fix that?

[howardjohn]

cloudflare/boring#214
istio/istio#52926

I think these are the relevant ones. I'd be happy to be wrong and have this done in some way 🙂