From 5d096975c3bc7efea7a50a0c531040ba1aedad2c Mon Sep 17 00:00:00 2001 From: Jesse Szwedko Date: Wed, 16 Aug 2023 10:29:29 -0700 Subject: [PATCH 1/2] chore(security): Make the warning for the deprecated OpenSSL provider more verbose To guide users that run into it. Signed-off-by: Jesse Szwedko --- src/app.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app.rs b/src/app.rs index baee7a8afc23b..596adbb1c50b2 100644 --- a/src/app.rs +++ b/src/app.rs @@ -572,7 +572,7 @@ pub fn init_logging(color: bool, format: LogFormat, log_level: &str, rate: u64) /// The returned [Provider] must stay in scope for the entire lifetime of the application, as it /// will be unloaded when it is dropped. pub fn load_openssl_legacy_provider() -> Option { - warn!(message = "DEPRECATED The openssl legacy provider provides algorithms and key sizes no longer recommended for use."); + warn!(message = "DEPRECATED The openssl legacy provider provides algorithms and key sizes no longer recommended for use. Set `--openssl-legacy-provider=false` or `VECTOR_OPENSSL_LEGACY_PROVIDER=false` to disable. See https://vector.dev/highlights/2023-08-15-0-32-0-upgrade-guide/#legacy-openssl for details"); Provider::try_load(None, "legacy", true) .map(|provider| { info!(message = "Loaded openssl legacy provider."); From f46bce7f8045c4f2ac1f6f3281faa0553216beab Mon Sep 17 00:00:00 2001 From: Jesse Szwedko Date: Wed, 16 Aug 2023 11:00:52 -0700 Subject: [PATCH 2/2] style Signed-off-by: Jesse Szwedko --- src/app.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app.rs b/src/app.rs index 596adbb1c50b2..ed0bf2545c7d6 100644 --- a/src/app.rs +++ b/src/app.rs @@ -572,7 +572,7 @@ pub fn init_logging(color: bool, format: LogFormat, log_level: &str, rate: u64) /// The returned [Provider] must stay in scope for the entire lifetime of the application, as it /// will be unloaded when it is dropped. pub fn load_openssl_legacy_provider() -> Option { - warn!(message = "DEPRECATED The openssl legacy provider provides algorithms and key sizes no longer recommended for use. Set `--openssl-legacy-provider=false` or `VECTOR_OPENSSL_LEGACY_PROVIDER=false` to disable. See https://vector.dev/highlights/2023-08-15-0-32-0-upgrade-guide/#legacy-openssl for details"); + warn!(message = "DEPRECATED The openssl legacy provider provides algorithms and key sizes no longer recommended for use. Set `--openssl-legacy-provider=false` or `VECTOR_OPENSSL_LEGACY_PROVIDER=false` to disable. See https://vector.dev/highlights/2023-08-15-0-32-0-upgrade-guide/#legacy-openssl for details."); Provider::try_load(None, "legacy", true) .map(|provider| { info!(message = "Loaded openssl legacy provider.");