From 16a8e81f06b571f9aa46afe09d902ed26b873506 Mon Sep 17 00:00:00 2001 From: "William A. Rowe Jr" Date: Wed, 20 Feb 2013 04:15:18 +0000 Subject: [PATCH] mod_ssl: Quiet FIPS mode weak keys disabled and FIPS not selected emits in the error log to debug level. [William Rowe] git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1447993 13f79535-47bb-0310-9956-ffa450edef68 --- CHANGES | 3 +++ modules/ssl/ssl_engine_init.c | 6 +++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/CHANGES b/CHANGES index 24c46bc37e..5c7874a1e5 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,9 @@ -*- coding: utf-8 -*- Changes with Apache 2.5.0 + *) mod_ssl: Quiet FIPS mode weak keys disabled and FIPS not selected emits + in the error log to debug level. [William Rowe] + *) core: ap_rgetline_core now pulls from r->proto_input_filters. *) mod_proxy_html: process parsed comments immediately. diff --git a/modules/ssl/ssl_engine_init.c b/modules/ssl/ssl_engine_init.c index be3212defa..1e851d737b 100644 --- a/modules/ssl/ssl_engine_init.c +++ b/modules/ssl/ssl_engine_init.c @@ -91,7 +91,7 @@ static int ssl_tmp_key_init_rsa(server_rec *s, if (FIPS_mode() && bits < 1024) { mc->pTmpKeys[idx] = NULL; - ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01877) + ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01877) "Init: Skipping generating temporary " "%d bit RSA private key in FIPS mode", bits); return OK; @@ -140,7 +140,7 @@ static int ssl_tmp_key_init_dh(server_rec *s, if (FIPS_mode() && bits < 1024) { mc->pTmpKeys[idx] = NULL; - ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01880) + ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01880) "Init: Skipping generating temporary " "%d bit DH parameters in FIPS mode", bits); return OK; @@ -354,7 +354,7 @@ int ssl_init_Module(apr_pool_t *p, apr_pool_t *plog, } } else { - ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(01886) + ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01886) "SSL FIPS mode disabled"); } #endif -- 2.50.1