Merge pull request #1532 from Altinity/fixes/25.3-fips/starup_checks

Author: Enmk

programs/keeper/Keeper.cpp

@@ -177,6 +177,14 @@ void Keeper::initialize(Poco::Util::Application & self)
         Poco::Environment::osName(),
         Poco::Environment::osVersion(),
         Poco::Environment::osArchitecture());
+
+#if USE_SSL && defined(FIPS_CLICKHOUSE)
+    if (FIPS_mode())
+    {
+        LOG_INFO(&logger(), "Starting in FIPS mode, KAT test result: {}, Integrity check: {}",
+                BORINGSSL_self_test(), BORINGSSL_integrity_test());
+    }
+#endif
 }
 
 std::string Keeper::getDefaultConfigFileName() const

programs/server/Server.cpp

@@ -141,6 +141,7 @@
 #    include <Server/SSH/SSHPtyHandlerFactory.h>
 #    include <Common/LibSSHInitializer.h>
 #    include <Common/LibSSHLogger.h>
+#    include <openssl/crypto.h>
 #endif
 
 #if USE_GRPC
@@ -593,6 +594,14 @@ void Server::initialize(Poco::Util::Application & self)
         Poco::Environment::osName(),
         Poco::Environment::osVersion(),
         Poco::Environment::osArchitecture());
+
+#if USE_SSL && defined(FIPS_CLICKHOUSE)
+    if (FIPS_mode())
+    {
+        LOG_INFO(&logger(), "Starting in FIPS mode, KAT test result: {}, Integrity check: {}",
+                BORINGSSL_self_test(), BORINGSSL_integrity_test());
+    }
+#endif
 }
 
 std::string Server::getDefaultCorePath() const