transport-section: add ensure_fips option (#521)

Signed-off-by: Kentaro Hayashi <[email protected]>
Co-authored-by: Daijiro Fukuda <[email protected]>

Author: kenhys

configuration/transport-section.md

@@ -91,6 +91,11 @@ The max size of socket receive buffer for TCP/UDP. This is used in `SO_RCVBUF` s
   * OpenSSL 1.0.0 or higher default.
 * `insecure` \[bool\]
   * Default: `false` \(uses secure connection with `tls`\)
+* `ensure_fips`: \[bool\]
+  * Default: `false`
+  * Version: 1.18.0
+  * Specifies whether it must use FIPS mode with OpenSSL. If `true`, Fluentd will check FIPS mode is supported in your environment, if not, just aborts.
+    If `false`, it does nothing and don't care FIPS mode with OpenSSL.
 
 If you want to accept multiple TLS protocols, use `min_version`/`max_version` instead of `version`. To support the old style, fluentd accepts `TLS1_1` and `TLSv1_1` values.