openssl: Be less verbose about FIPS mode when not running as daemon

While this is valuable information, printing it for pki and other tools is
annoying.

diff --git a/src/libstrongswan/plugins/openssl/openssl_plugin.c b/src/libstrongswan/plugins/openssl/openssl_plugin.c
index 372a480fad3982020b9f91947da07b6395df4366..1ca1690ad4e3905cfe4c8b16ee64bef65236d6f7 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_plugin.c
+++ b/src/libstrongswan/plugins/openssl/openssl_plugin.c
@@ -558,8 +558,8 @@ plugin_t *openssl_plugin_create()
 #ifdef OPENSSL_FIPS
        /* we do this here as it may have been enabled via openssl.conf */
        fips_mode = FIPS_mode();
-       DBG1(DBG_LIB, "openssl FIPS mode(%d) - %sabled ", fips_mode,
-                fips_mode ? "en" : "dis");
+       dbg(DBG_LIB, strpfx(lib->ns, "charon") ? 1 : 2,
+               "openssl FIPS mode(%d) - %sabled ", fips_mode, fips_mode ? "en" : "dis");
 #endif /* OPENSSL_FIPS */
 
 #ifndef OPENSSL_NO_ENGINE