https://bz.apache.org/bugzilla/show_bug.cgi?id=64474

            Bug ID: 64474
           Summary: Truststore validation is failing to show detailed log
                    messages for out-of-date entries
           Product: Tomcat 8
           Version: 8.5.x-trunk
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Util
          Assignee: dev@tomcat.apache.org
          Reporter: ismae...@gmail.com
  Target Milestone: ----

Truststore validation is failing to show detailed log messages for out-of-date
entries. For instance, with 8.5.27, we would get something like this in
catalina.log for an outdated entry in the configured truststore:

WARNING [main] org.apache.tomcat.util.net.jsse.JSSEUtil.checkTrustStoreEntries
The trusted certificate with alias [somealias] and DN [CN=SomeCN, OU="SomeOU",
O=SomeO, C=US] is not valid due to [NotAfter: <SomeDate>]. Certificates signed
by this trusted certificate WILL be accepted

Now, we get something like this:

WARNING [main] org.apache.tomcat.util.net.SSLUtilBase.checkTrustStoreEntries
jsseUtil.trustedCertNotValid

It seems that the refactored SSLUtilBase method is unable to obtain the message
identified by "jsseUtil.trustedCertNotValid":

https://github.com/apache/tomcat/blob/8.5.x/java/org/apache/tomcat/util/net/SSLUtilBase.java

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to