diff --git a/CHANGES b/CHANGES index 24c46bc37e..5c7874a1e5 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,9 @@ -*- coding: utf-8 -*- Changes with Apache 2.5.0 + *) mod_ssl: Quiet FIPS mode weak keys disabled and FIPS not selected emits + in the error log to debug level. [William Rowe] + *) core: ap_rgetline_core now pulls from r->proto_input_filters. *) mod_proxy_html: process parsed comments immediately. diff --git a/modules/ssl/ssl_engine_init.c b/modules/ssl/ssl_engine_init.c index be3212defa..1e851d737b 100644 --- a/modules/ssl/ssl_engine_init.c +++ b/modules/ssl/ssl_engine_init.c @@ -91,7 +91,7 @@ static int ssl_tmp_key_init_rsa(server_rec *s, if (FIPS_mode() && bits < 1024) { mc->pTmpKeys[idx] = NULL; - ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01877) + ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01877) "Init: Skipping generating temporary " "%d bit RSA private key in FIPS mode", bits); return OK; @@ -140,7 +140,7 @@ static int ssl_tmp_key_init_dh(server_rec *s, if (FIPS_mode() && bits < 1024) { mc->pTmpKeys[idx] = NULL; - ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, APLOGNO(01880) + ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01880) "Init: Skipping generating temporary " "%d bit DH parameters in FIPS mode", bits); return OK; @@ -354,7 +354,7 @@ int ssl_init_Module(apr_pool_t *p, apr_pool_t *plog, } } else { - ap_log_error(APLOG_MARK, APLOG_NOTICE, 0, s, APLOGNO(01886) + ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, APLOGNO(01886) "SSL FIPS mode disabled"); } #endif