[tomcat] branch 9.0.x updated: Improve logging of security exception

[remm]

This is an automated email from the ASF dual-hosted git repository.

remm pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
     new 71a67cfae8 Improve logging of security exception
71a67cfae8 is described below

commit 71a67cfae85fd88432f6f5a1a0645d2b5b48fb08
Author: remm <r...@apache.org>
AuthorDate: Tue Sep 19 14:00:37 2023 +0200

    Improve logging of security exception
    
    The intent was to log more information if debug is enabled, not reduce
    the log level.
    Found by coverity.
---
 java/org/apache/tomcat/util/net/SSLUtilBase.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/org/apache/tomcat/util/net/SSLUtilBase.java 
b/java/org/apache/tomcat/util/net/SSLUtilBase.java
index e0bd30c1e1..b07f4fe7ff 100644
--- a/java/org/apache/tomcat/util/net/SSLUtilBase.java
+++ b/java/org/apache/tomcat/util/net/SSLUtilBase.java
@@ -473,7 +473,7 @@ public abstract class SSLUtilBase implements SSLUtil {
                             String msg = 
sm.getString("sslUtilBase.trustedCertNotValid", alias,
                                     ((X509Certificate) 
cert).getSubjectX500Principal(), e.getMessage());
                             if (log.isDebugEnabled()) {
-                                log.debug(msg, e);
+                                log.warn(msg, e);
                             } else {
                                 log.warn(msg);
                             }


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org