diff --git a/lib/ssllib.c b/lib/ssllib.c index a867f0f3b..7ff9960d7 100644 --- a/lib/ssllib.c +++ b/lib/ssllib.c @@ -2,6 +2,7 @@ #include #include #include "auxlib.h" +#include "log.h" @@ -45,6 +46,9 @@ static void make_OpenSSL_thread_safe(void) { void rtpe_ssl_init(void) { + ilog(LOG_INFO,"compile-time OpenSSL library: %s\n", OPENSSL_VERSION_TEXT); + ilog(LOG_INFO,"run-time OpenSSL library: %s\n", OpenSSL_version(OPENSSL_VERSION)); + #if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) SSL_library_init(); SSL_load_error_strings(); @@ -52,6 +56,12 @@ void rtpe_ssl_init(void) { #endif #if OPENSSL_VERSION_NUMBER >= 0x30000000L + if(EVP_default_properties_is_fips_enabled(NULL) == 1) { + ilog(LOG_INFO,"FIPS mode enabled in OpenSSL library\n"); + } else { + ilog(LOG_DEBUG,"FIPS mode not enabled in OpenSSL library\n"); + } + EVP_MAC *rtpe_evp_hmac = EVP_MAC_fetch(NULL, "hmac", NULL); assert(rtpe_evp_hmac != NULL);