24.3.5 Altinity FIPS
Changes compared to 24.3.5.47.altinitystable
Improvement
- Building BoringSSL ver
fips-20210429
(853ca1ea1168dff08011e5d42d94609cc0ca2e27
) according to FIPS-140-2 Security Policy 4407, based on build scripts from Golang versiongo1.22.5
- Added
FIPS_CLICKHOUSE
tosystem.build_options
- Modified ClickHosue keeper to use full range of openSSL options (same as ClickHouse does) for Raft connections
- using
ubuntu:22.04
as a base forclickhouse-server
docker images instead ofubuntu:20.04
Build/Testing/Packaging Improvement
- CI/CD for FIPS mode
- other fixes for CI/CD
Full Changelog: v24.3.5.47.altinitystable...v24.3.5.48.altinityfips
Build report
Packages
Available for AMD64 from https://builds.altinity.cloud/ as either .deb
, .rpm
, or .tgz
Docker images
Available for AMD64: altinity/clickhouse-server/24.3.5.48.altinityfips