From: Martin Willi <martin@revosec.ch>
Date: Wed, 5 Mar 2014 11:18:33 +0000 (+0100)
Subject: openssl: Be less verbose about FIPS mode when not running as daemon
X-Git-Tag: 5.2.0dr6~24^2~33
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=93168c5f1df52ad52ba28bfe4fb17c0931ed1a85;p=thirdparty%2Fstrongswan.git

openssl: Be less verbose about FIPS mode when not running as daemon

While this is valuable information, printing it for pki and other tools is
annoying.
---

diff --git a/src/libstrongswan/plugins/openssl/openssl_plugin.c b/src/libstrongswan/plugins/openssl/openssl_plugin.c
index 372a480fad..1ca1690ad4 100644
--- a/src/libstrongswan/plugins/openssl/openssl_plugin.c
+++ b/src/libstrongswan/plugins/openssl/openssl_plugin.c
@@ -558,8 +558,8 @@ plugin_t *openssl_plugin_create()
 #ifdef OPENSSL_FIPS
 	/* we do this here as it may have been enabled via openssl.conf */
 	fips_mode = FIPS_mode();
-	DBG1(DBG_LIB, "openssl FIPS mode(%d) - %sabled ", fips_mode,
-		 fips_mode ? "en" : "dis");
+	dbg(DBG_LIB, strpfx(lib->ns, "charon") ? 1 : 2,
+		"openssl FIPS mode(%d) - %sabled ", fips_mode, fips_mode ? "en" : "dis");
 #endif /* OPENSSL_FIPS */
 
 #ifndef OPENSSL_NO_ENGINE