https://bz.apache.org/bugzilla/show_bug.cgi?id=61180
Bug ID: 61180
Summary: Change log level of
sessionIdGeneratorBase.createRandom to warn rather
than info
Product: Tomcat 8
Version: 8.0.x-trunk
Hardware: All
OS: All
Status: NEW
Severity: trivial
Priority: P2
Component: Catalina
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ----
I was just asked a question in #tomcat about why a user's tomcat installation
was taking ~36 minutes to start. After looking at their logging I immediately
noticed:
INFO [localhost-startStop-1]
org.apache.catalina.util.SessionIdGeneratorBase.createSecureRandom Creation of
SecureRandom instance for session ID generation using [SHA1PRNG] took
[2,157,784] milliseconds.
showing that the machine had low entropy. I knew that from experience, however
the user had no idea that was the issue because the logging looked normal to
them (no WARN or ERROR messages). Can we change the log level of the
sessionIdGeneratorBase.createRandom message to WARN rather than INFO so if it
takes longer than 100 ms to generate a random users are made aware? A WARN
message will at least make them look twice at the error line and google it as a
potential issue, which should yield the wiki page
(https://wiki.apache.org/tomcat/HowTo/FasterStartUp#Entropy_Source).
Also, the wording in the wiki page makes this sound like it should be a warning
anyway:
"You will see warning in the logs when this happens"
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
