From 455c341efcc5c88a9194a20248172d5d3355bb0b Mon Sep 17 00:00:00 2001 From: Koichiro IWAO Date: Fri, 23 Jun 2017 00:07:22 +0900 Subject: [PATCH] Reword log messages in ssl_get_protocols_from_string() --- common/ssl_calls.c | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/common/ssl_calls.c b/common/ssl_calls.c index a741ef92..fcd18f86 100644 --- a/common/ssl_calls.c +++ b/common/ssl_calls.c @@ -877,7 +877,9 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols) log_message(LOG_LEVEL_DEBUG, "TLSv1.2 enabled"); protocols &= ~SSL_OP_NO_TLSv1_2; #else - log_message(LOG_LEVEL_DEBUG, "TLSv1.2 not enabled, not available"); + log_message(LOG_LEVEL_DEBUG, + "TLSv1.2 enabled by config, " + "but not supported by system OpenSSL"); rv |= (1 << 1); #endif } @@ -887,7 +889,9 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols) log_message(LOG_LEVEL_DEBUG, "TLSv1.1 enabled"); protocols &= ~SSL_OP_NO_TLSv1_1; #else - log_message(LOG_LEVEL_DEBUG, "TLSv1.1 not enabled, not available"); + log_message(LOG_LEVEL_DEBUG, + "TLSv1.1 enabled by config, " + "but not supported by system OpenSSL"); rv |= (1 << 2); #endif } @@ -897,7 +901,9 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols) log_message(LOG_LEVEL_DEBUG, "TLSv1 enabled"); protocols &= ~SSL_OP_NO_TLSv1; #else - log_message(LOG_LEVEL_DEBUG, "TLSv1 not enabled, not available"); + log_message(LOG_LEVEL_DEBUG, + "TLSv1 enabled by config, " + "but not supported by system OpenSSL"); rv |= (1 << 3); #endif } @@ -907,7 +913,9 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols) log_message(LOG_LEVEL_DEBUG, "SSLv3 enabled"); protocols &= ~SSL_OP_NO_SSLv3; #else - log_message(LOG_LEVEL_DEBUG, "SSLv3 not enabled, not available"); + log_message(LOG_LEVEL_DEBUG, + "SSLv3 enabled by config, " + "but not supported by system OpenSSL"); rv |= (1 << 4); #endif }