diff --git a/openssh-7.7p1-fips.patch b/openssh-7.7p1-fips.patch index 6e72d04..8288ed2 100644 --- a/openssh-7.7p1-fips.patch +++ b/openssh-7.7p1-fips.patch @@ -19,7 +19,7 @@ diff -up openssh-8.6p1/dh.c.fips openssh-8.6p1/dh.c struct dhgroup dhg; + if (FIPS_mode()) { -+ logit("Using arbitrary primes is not allowed in FIPS mode." ++ verbose("Using arbitrary primes is not allowed in FIPS mode." + " Falling back to known groups."); + return (dh_new_group_fallback(max)); + } diff --git a/openssh.spec b/openssh.spec index 92f4a7a..feee273 100644 --- a/openssh.spec +++ b/openssh.spec @@ -689,6 +689,8 @@ test -f %{sysconfig_anaconda} && \ Related: rhbz#2031868 - Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch Resolves: rhbz#2064338 +- Change log level of FIPS specific log message to verbose + Resolves: rhbz#2102201 * Mon Feb 21 2022 Dmitry Belyavskiy - 8.7p1-8 - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode