You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2009/04/20 15:26:38 UTC
DO NOT REPLY [Bug 47057] New: Downgrade signature verification
logging from "info"
https://issues.apache.org/bugzilla/show_bug.cgi?id=47057
Summary: Downgrade signature verification logging from "info"
Product: Security
Version: unspecified
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: trivial
Priority: P2
Component: Signature
AssignedTo: security-dev@xml.apache.org
ReportedBy: coheigea@apache.org
Every time a Reference is succesfully validated on signature verification, a
message is logged at level "info". IMO this should be logged at debug, as the
default logging level is often "info" in deployments and this is leading to
unnecessary output. For example, this is the output for one signature
verification in CXF on a WCF interop test (all one signature verification):
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#Id-4236415"
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#id-6"
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#id-7"
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#id-8"
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#id-9"
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#Timestamp-3"
17-Apr-2009 18:15:00 org.apache.xml.security.signature.Reference verify
INFO: Verification successful for URI "#SigConf-4"
XML-Security has very few logs at "info", and lots at "debug" so I think it's
correct to change this. The change is:
org.apache.xml.security.signature.Reference
Replace
764: log.info("Verification successful for URI \"" + this.getURI() + "\"");
with
764: log.debug("Verification successful for URI \"" + this.getURI() + "\"");
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
DO NOT REPLY [Bug 47057] Downgrade signature verification logging
from "info"
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47057
sean.mullan@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
--- Comment #1 from sean.mullan@sun.com 2009-05-22 08:28:52 PST ---
This seems like a reasonable change. Fixed in HEAD.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.