[tomcat] branch main updated: Improve logging of security exception

[remm]

This is an automated email from the ASF dual-hosted git repository.

remm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/main by this push:
     new aa82027c26 Improve logging of security exception
aa82027c26 is described below

commit aa82027c26d3a5e903f2a8bde53acdf36ec06fce
Author: remm <r...@apache.org>
AuthorDate: Tue Sep 19 14:00:37 2023 +0200

    Improve logging of security exception
    
    The intent was to log more information if debug is enabled, not reduce
    the log level.
    Found by coverity.
---
 java/org/apache/tomcat/util/net/SSLUtilBase.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/org/apache/tomcat/util/net/SSLUtilBase.java 
b/java/org/apache/tomcat/util/net/SSLUtilBase.java
index 6976718a69..fb8c5558e1 100644
--- a/java/org/apache/tomcat/util/net/SSLUtilBase.java
+++ b/java/org/apache/tomcat/util/net/SSLUtilBase.java
@@ -472,7 +472,7 @@ public abstract class SSLUtilBase implements SSLUtil {
                             String msg = 
sm.getString("sslUtilBase.trustedCertNotValid", alias,
                                     ((X509Certificate) 
cert).getSubjectX500Principal(), e.getMessage());
                             if (log.isDebugEnabled()) {
-                                log.debug(msg, e);
+                                log.warn(msg, e);
                             } else {
                                 log.warn(msg);
                             }


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org