summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Newson <rnewson@apache.org>2020-06-05 12:40:08 +0100
committerJoan Touzet <joant@atypical.net>2020-09-01 11:14:28 -0400
commit1c510b9686070d08a990110d8898d9c5811570c7 (patch)
treedd778f2bd9cb14d6839dad1b40bbf56405ead269
parent8ef3c0d5510312e6f73d5aac772bf4e113001f5d (diff)
downloadcouchdb-3.x-fips-mode-enabled.tar.gz
Report if FIPS mode is enabled3.x-fips-mode-enabled
This will only report "fips" in the welcome message if FIPS mode was enabled at boot (i.e, in vm.args).
-rw-r--r--src/couch/src/couch_server.erl10
1 files changed, 10 insertions, 0 deletions
diff --git a/src/couch/src/couch_server.erl b/src/couch/src/couch_server.erl
index b2f8fdead..6db3f7448 100644
--- a/src/couch/src/couch_server.erl
+++ b/src/couch/src/couch_server.erl
@@ -246,6 +246,16 @@ init([]) ->
% Mark being able to receive documents with an _access property as a supported feature
config:enable_feature('access-ready'),
+ % Mark if fips is enabled
+ case
+ erlang:function_exported(crypto, info_fips, 0) andalso
+ crypto:info_fips() == enabled of
+ true ->
+ config:enable_feature('fips');
+ false ->
+ ok
+ end,
+
% read config and register for configuration changes
% just stop if one of the config settings change. couch_server_sup