only check magic string when encrypt function is open (#16292)

Author: zhujt20

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/conf/IoTDBStartCheck.java

@@ -382,37 +382,37 @@ public void generateOrOverwriteSystemPropertiesFile() throws IOException {
   }
 
   public void checkEncryptMagicString() throws IOException, ConfigurationException {
-    properties = systemPropertiesHandler.read();
-    CommonDescriptor.getInstance()
-        .getConfig()
-        .setUserEncryptTokenHint(properties.getProperty(ENCRYPT_TOKEN_HINT));
-    String encryptSalt = properties.getProperty(ENCRYPT_SALT);
-    byte[] saltBytes = EncryptUtils.hexStringToByteArray(encryptSalt);
-    TSFileDescriptor.getInstance().getConfig().setEncryptSalt(saltBytes);
-
     if (!Objects.equals(TSFileDescriptor.getInstance().getConfig().getEncryptType(), "UNENCRYPTED")
         && !Objects.equals(
             TSFileDescriptor.getInstance().getConfig().getEncryptType(),
             "org.apache.tsfile.encrypt.UNENCRYPTED")) {
+      properties = systemPropertiesHandler.read();
+      CommonDescriptor.getInstance()
+          .getConfig()
+          .setUserEncryptTokenHint(properties.getProperty(ENCRYPT_TOKEN_HINT));
+      String encryptSalt = properties.getProperty(ENCRYPT_SALT);
+      byte[] saltBytes = EncryptUtils.hexStringToByteArray(encryptSalt);
+      TSFileDescriptor.getInstance().getConfig().setEncryptSalt(saltBytes);
+
       String token = System.getenv("user_encrypt_token");
       if (token == null || token.trim().isEmpty()) {
         throw new EncryptException(
             "restart system after not storing key, but user_encrypt_token is not set. Please set it in the environment variable before restart. Here is your token hint info: "
                 + CommonDescriptor.getInstance().getConfig().getUserEncryptTokenHint());
       }
       TSFileDescriptor.getInstance().getConfig().setEncryptKeyFromToken(token);
-    }
-    String encryptMagicString = properties.getProperty(ENCRYPT_MAGIC_STRING);
-    byte[] magicStringBytes = EncryptUtils.hexStringToByteArray(encryptMagicString);
-    String decryptedMagicString =
-        new String(
-            EncryptUtils.getEncrypt().getDecryptor().decrypt(magicStringBytes),
-            TSFileConfig.STRING_CHARSET);
-    if (!Objects.equals(decryptedMagicString, magicString)) {
-      logger.error("encrypt_magic_string is not matched");
-      throw new ConfigurationException(
-          "Changing encrypt type or key for tsfile encryption after first start is not permitted. Here is your token hint info: "
-              + CommonDescriptor.getInstance().getConfig().getUserEncryptTokenHint());
+      String encryptMagicString = properties.getProperty(ENCRYPT_MAGIC_STRING);
+      byte[] magicStringBytes = EncryptUtils.hexStringToByteArray(encryptMagicString);
+      String decryptedMagicString =
+          new String(
+              EncryptUtils.getEncrypt().getDecryptor().decrypt(magicStringBytes),
+              TSFileConfig.STRING_CHARSET);
+      if (!Objects.equals(decryptedMagicString, magicString)) {
+        logger.error("encrypt_magic_string is not matched");
+        throw new ConfigurationException(
+            "Changing encrypt type or key for tsfile encryption after first start is not permitted. Here is your token hint info: "
+                + CommonDescriptor.getInstance().getConfig().getUserEncryptTokenHint());
+      }
     }
   }
 }