summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoan Touzet <wohali@users.noreply.github.com>2020-09-01 13:37:13 -0400
committerGitHub <noreply@github.com>2020-09-01 13:37:13 -0400
commita5d1fa40a1fb89205fb925e99a6bf4235c65b646 (patch)
treedd778f2bd9cb14d6839dad1b40bbf56405ead269
parent8ef3c0d5510312e6f73d5aac772bf4e113001f5d (diff)
downloadcouchdb-a5d1fa40a1fb89205fb925e99a6bf4235c65b646.tar.gz
Report if FIPS mode is enabled (#3121)
This will only report "fips" in the welcome message if FIPS mode was enabled at boot (i.e, in vm.args). Co-authored-by: Robert Newson <rnewson@apache.org>
-rw-r--r--src/couch/src/couch_server.erl10
1 files changed, 10 insertions, 0 deletions
diff --git a/src/couch/src/couch_server.erl b/src/couch/src/couch_server.erl
index b2f8fdead..6db3f7448 100644
--- a/src/couch/src/couch_server.erl
+++ b/src/couch/src/couch_server.erl
@@ -246,6 +246,16 @@ init([]) ->
% Mark being able to receive documents with an _access property as a supported feature
config:enable_feature('access-ready'),
+ % Mark if fips is enabled
+ case
+ erlang:function_exported(crypto, info_fips, 0) andalso
+ crypto:info_fips() == enabled of
+ true ->
+ config:enable_feature('fips');
+ false ->
+ ok
+ end,
+
% read config and register for configuration changes
% just stop if one of the config settings change. couch_server_sup