Change log level DEBUG -> WARNING

since unavailability of ssl protocols defined in config file
may weaken security and it is important for users.
master
Koichiro IWAO 7 years ago committed by metalefty
parent 455c341efc
commit aa4b90d250

@ -877,7 +877,7 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols)
log_message(LOG_LEVEL_DEBUG, "TLSv1.2 enabled"); log_message(LOG_LEVEL_DEBUG, "TLSv1.2 enabled");
protocols &= ~SSL_OP_NO_TLSv1_2; protocols &= ~SSL_OP_NO_TLSv1_2;
#else #else
log_message(LOG_LEVEL_DEBUG, log_message(LOG_LEVEL_WARNING,
"TLSv1.2 enabled by config, " "TLSv1.2 enabled by config, "
"but not supported by system OpenSSL"); "but not supported by system OpenSSL");
rv |= (1 << 1); rv |= (1 << 1);
@ -889,7 +889,7 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols)
log_message(LOG_LEVEL_DEBUG, "TLSv1.1 enabled"); log_message(LOG_LEVEL_DEBUG, "TLSv1.1 enabled");
protocols &= ~SSL_OP_NO_TLSv1_1; protocols &= ~SSL_OP_NO_TLSv1_1;
#else #else
log_message(LOG_LEVEL_DEBUG, log_message(LOG_LEVEL_WARNING,
"TLSv1.1 enabled by config, " "TLSv1.1 enabled by config, "
"but not supported by system OpenSSL"); "but not supported by system OpenSSL");
rv |= (1 << 2); rv |= (1 << 2);
@ -901,7 +901,7 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols)
log_message(LOG_LEVEL_DEBUG, "TLSv1 enabled"); log_message(LOG_LEVEL_DEBUG, "TLSv1 enabled");
protocols &= ~SSL_OP_NO_TLSv1; protocols &= ~SSL_OP_NO_TLSv1;
#else #else
log_message(LOG_LEVEL_DEBUG, log_message(LOG_LEVEL_WARNING,
"TLSv1 enabled by config, " "TLSv1 enabled by config, "
"but not supported by system OpenSSL"); "but not supported by system OpenSSL");
rv |= (1 << 3); rv |= (1 << 3);
@ -913,7 +913,7 @@ ssl_get_protocols_from_string(const char *str, long *ssl_protocols)
log_message(LOG_LEVEL_DEBUG, "SSLv3 enabled"); log_message(LOG_LEVEL_DEBUG, "SSLv3 enabled");
protocols &= ~SSL_OP_NO_SSLv3; protocols &= ~SSL_OP_NO_SSLv3;
#else #else
log_message(LOG_LEVEL_DEBUG, log_message(LOG_LEVEL_WARNING,
"SSLv3 enabled by config, " "SSLv3 enabled by config, "
"but not supported by system OpenSSL"); "but not supported by system OpenSSL");
rv |= (1 << 4); rv |= (1 << 4);

Loading…
Cancel
Save