From 7952bfbdfd01a2c11b07c527d3926efcdd6c4664 Mon Sep 17 00:00:00 2001 From: Jesse Szwedko Date: Thu, 17 Aug 2023 08:46:37 -0700 Subject: [PATCH] chore(security): Make the warning for the deprecated OpenSSL provider more verbose (#18278) * chore(security): Make the warning for the deprecated OpenSSL provider more verbose To guide users that run into it. Signed-off-by: Jesse Szwedko * style Signed-off-by: Jesse Szwedko --------- Signed-off-by: Jesse Szwedko --- src/app.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/app.rs b/src/app.rs index d3f3632c2bcfb..345e1437cd533 100644 --- a/src/app.rs +++ b/src/app.rs @@ -572,7 +572,7 @@ pub fn init_logging(color: bool, format: LogFormat, log_level: &str, rate: u64) /// The returned [Provider] must stay in scope for the entire lifetime of the application, as it /// will be unloaded when it is dropped. pub fn load_openssl_legacy_providers() -> Result, ExitCode> { - warn!(message = "DEPRECATED The openssl legacy provider provides algorithms and key sizes no longer recommended for use."); + warn!(message = "DEPRECATED The openssl legacy provider provides algorithms and key sizes no longer recommended for use. Set `--openssl-legacy-provider=false` or `VECTOR_OPENSSL_LEGACY_PROVIDER=false` to disable. See https://vector.dev/highlights/2023-08-15-0-32-0-upgrade-guide/#legacy-openssl for details."); ["legacy", "default"].into_iter().map(|provider_name| { Provider::try_load(None, provider_name, true) .map(|provider| {