Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@igorscs
Copy link
Contributor

@igorscs igorscs commented Jan 22, 2026

Generate logs to validate that FIPS cryptographic module is enabled at runtime for client/server connections, as recommended in step 3 of https://docs.rs/rustls/latest/rustls/manual/_06_fips/index.html

Log examples:

Startup log (no HTTPS needed):

  • Linux, FIPS enabled:

INFO Rustls startup default provider: FIPS is enabled for cryptography.

  • Linux, FIPS disabled:

WARN Rustls startup default provider: FIPS is disabled for cryptography.

  • macOS:

INFO Rustls startup default provider: FIPS is disabled for cryptography (non-Linux build).

HTTPS logs (only if HTTPS is enabled):

  • Linux, FIPS enabled:
  INFO Rustls HTTPS server config: FIPS is enabled for connections.
  INFO Rustls HTTPS client config: FIPS is enabled for connections.
  • Linux, FIPS disabled:
  WARN Rustls HTTPS server config: FIPS is disabled for connections.
  WARN Rustls HTTPS client config: FIPS is disabled for connections.
  • macOS:
  INFO Rustls HTTPS server config: FIPS is disabled for connections (non-Linux build).
  INFO Rustls HTTPS client config: FIPS is disabled for connections (non-Linux build).

Checklist

  • Documentation updated
  • Changelog updated

Breaking Changes?

Mark if you think the answer is yes for any of these components:

Describe Incompatible Changes

Add a few sentences describing the incompatible changes if any.

Generate logs to validate that FIPS cryptographic module is enabled
at runtime for client/server connections, as recomended in step 3 of
https://docs.rs/rustls/latest/rustls/manual/_06_fips/index.html
@igorscs igorscs requested review from blp and gz January 22, 2026 03:29
Co-authored-by: Gerd Zellweger <[email protected]>
Signed-off-by: igorscs <[email protected]>
@igorscs igorscs self-assigned this Jan 22, 2026
Signed-off-by: feldera-bot <[email protected]>
@igorscs igorscs added this pull request to the merge queue Jan 22, 2026
Merged via the queue into main with commit b692dfe Jan 22, 2026
1 check passed
@igorscs igorscs deleted the fips-check-runtime branch January 22, 2026 07:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants