This is an automated email from the ASF dual-hosted git repository.
pjfanning pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/pekko.git
The following commit(s) were added to refs/heads/main by this push:
new 6bbd5d041d fix: log the classic hostname verification warning at
warning level (#3479)
6bbd5d041d is described below
commit 6bbd5d041de06ae43bea2a8e9dbc74bb5cad6d1d
Author: PJ Fanning <[email protected]>
AuthorDate: Thu Aug 27 22:05:41 2026 +0100
fix: log the classic hostname verification warning at warning level (#3479)
### Motivation
Both remoting transports log when TLS is enabled without hostname
verification, but at different levels. Artery logs at `warning`, classic
remoting at `info`, where it is easily lost in startup output. Both carry
the
`LogMarker.Security` marker, which the documentation tells operators to
treat
as security relevant, so the lower level in classic understates it.
### Modification
Log the classic remoting message at `warning`, matching artery. The message
text is unchanged, as is the `LogMarker.Security` marker.
### Result
Both transports report a disabled hostname verification at the same level.
### Tests
No test asserts on this message or its level.
### References
None - noticed while reviewing #3478
---
.../org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git
a/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala
b/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala
index 5a6f87cc10..3c80f31f71 100644
---
a/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala
+++
b/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala
@@ -84,7 +84,7 @@ class ConfigSSLEngineProvider(protected val log:
MarkerLoggingAdapter, private v
if (SSLHostnameVerification)
log.debug("TLS/SSL hostname verification is enabled.")
else
- log.info(
+ log.warning(
LogMarker.Security,
"TLS/SSL hostname verification is disabled. " +
"Set pekko.remote.classic.netty.ssl.security.hostname-verification=on to
enable.")
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
