br: make br support FIPS (#48421) | tidb-test=pr/2255

[ti-chi-bot]

This is an automated cherry-pick of #48421

What problem does this PR solve?

Issue Number: close #48419

Problem Summary:

What is changed and how it works?

imitate the #47949

Check List

Tests

• Unit test
• Integration test
• Manual test (add detailed scripts or steps below)

make build_br_fips
go tool nm bin/br |grep boring
 1f55d60 t local.crypto/internal/boring._Cfunc_EVP_AEAD_CTX_open_wrapper.abi0
 1f55f40 t local.crypto/internal/boring._Cfunc_EVP_AEAD_CTX_seal_wrapper.abi0
 1f56120 t local.crypto/internal/boring._Cfunc__goboringcrypto_AES_cbc_encrypt.abi0
 1f56280 t local.crypto/internal/boring._Cfunc__goboringcrypto_AES_ctr128_encrypt.abi0
 1f563e0 t local.crypto/internal/boring._Cfunc__goboringcrypto_AES_decrypt.abi0
 1f564a0 t local.crypto/internal/boring._Cfunc__goboringcrypto_AES_encrypt.abi0
 1f56560 t local.crypto/internal/boring._Cfunc__goboringcrypto_AES_set_decrypt_key.abi0
 1f56640 t local.crypto/internal/boring._Cfunc__goboringcrypto_AES_set_encrypt_key.abi0
 1f56720 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_bin2bn.abi0
 1f56800 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_bn2bin_padded.abi0
 1f568e0 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_bn2le_padded.abi0
 1f68580 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_free
 1f569c0 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_free.abi0
 1f56a40 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_le2bn.abi0
 1f56b20 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_new.abi0
 1f56b80 t local.crypto/internal/boring._Cfunc__goboringcrypto_BN_num_bytes.abi0
 1f56c00 t local.crypto/internal/boring._Cfunc__goboringcrypto_BORINGSSL_bcm_power_on_self_test.abi0
 1f56c60 t local.crypto/internal/boring._Cfunc__goboringcrypto_ECDSA_sign.abi0
 1f56dc0 t local.crypto/internal/boring._Cfunc__goboringcrypto_ECDSA_size.abi0
 1f56e40 t local.crypto/internal/boring._Cfunc__goboringcrypto_ECDSA_verify.abi0

./bin/br -V
Release Version: v7.6.0-alpha-203-gb3fbb4951d-dirty-fips
Git Commit Hash: b3fbb4951dd16b9e22987ef57845c83dc33da99a
Git Branch: br_fips
Go Version: go1.21.0 X:boringcrypto
 ...

./bin/tidb-lightning -V           
Release Version: v7.6.0-alpha-203-gb3fbb4951d-dirty-fips
Git Commit Hash: b3fbb4951dd16b9e22987ef57845c83dc33da99a
Git Branch: br_fips
Go Version: go1.21.0 X:boringcrypto
...

./bin/tidb-lightning-ctl -V 
Release Version: v7.6.0-alpha-203-gb3fbb4951d-dirty-fips
Git Commit Hash: b3fbb4951dd16b9e22987ef57845c83dc33da99a
Git Branch: br_fips
Go Version: go1.21.0 X:boringcrypto
...

./bin/tidb-server -V       
Release Version: v7.6.0-alpha-203-gb3fbb4951d-dirty-fips
Edition: Community
Git Commit Hash: b3fbb4951dd16b9e22987ef57845c83dc33da99a
Git Branch: br_fips
UTC Build Time: 2023-11-16 05:34:40
GoVersion: go1.21.0 X:boringcrypto
...

• No need to test

  • I checked and no code files have been changed.

Side effects

• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Breaking backward compatibility

Documentation

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Changes MySQL compatibility

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

None

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (feature/release-6.5-fips@bfbcedf). Click here to learn what that means.
The diff coverage is n/a.

Additional details and impacted files

@@                      Coverage Diff                      @@
##             feature/release-6.5-fips     #48786   +/-   ##
=============================================================
  Coverage                            ?   73.6249%           
=============================================================
  Files                               ?       1087           
  Lines                               ?     349436           
  Branches                            ?          0           
=============================================================
  Hits                                ?     257272           
  Misses                              ?      75643           
  Partials                            ?      16521           

[overvenus]

/hold

[overvenus]

/unhold

[overvenus]

/retest

[ti-chi-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: BornChanger, Leavrth

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [Leavrth]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ti-chi-bot]

[LGTM Timeline notifier]

Timeline:

• 2023-12-14 10:32:52.568612632 +0000 UTC m=+525063.605839559: ☑️ agreed by Leavrth.
• 2023-12-14 15:36:02.553110791 +0000 UTC m=+543253.590337718: ☑️ agreed by BornChanger.

[Leavrth]

/retest

[Leavrth]

/retest