From 434a6be821370daf9c2ff45cad7c9c34e409c8bf Mon Sep 17 00:00:00 2001 From: Ryan Richard Date: Thu, 25 Jun 2026 15:53:23 -0700 Subject: [PATCH] update fips log statement Signed-off-by: Ryan Richard --- internal/crypto/ptls/profiles.go | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/internal/crypto/ptls/profiles.go b/internal/crypto/ptls/profiles.go index b18503187..803655afe 100644 --- a/internal/crypto/ptls/profiles.go +++ b/internal/crypto/ptls/profiles.go @@ -116,9 +116,10 @@ func init() { //nolint:gochecknoinits // thus we must use a log statement that will always print instead of conditionally print plog.Always("this server was not compiled in legacy boring crypto FIPS-only mode", "go version", runtime.Version(), - "SecureProfileMinTLSVersionForNonFIPS", tls.VersionName(SecureProfileMinTLSVersionForNonFIPS), - "Go native GOFIPS140 enabled", fips140.Enabled(), - "Go native GOFIPS140 version", fips140.Version(), + "GOFIPS140 enabled", fips140.Enabled(), + "GOFIPS140 version", fips140.Version(), + "GOFIPS140 enforced (typically for testing only)", fips140.Enforced(), + "SecureProfileMinTLSVersionForNonFIPS (only applies when FIPS is disabled)", tls.VersionName(SecureProfileMinTLSVersionForNonFIPS), ) }