You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by "Gary Tully (JIRA)" <ji...@apache.org> on 2011/03/21 13:19:05 UTC
[jira] [Created] (AMQ-3231) Stomp Frame should mask passcode header
in toString output, so it does not pollute the log
Stomp Frame should mask passcode header in toString output, so it does not pollute the log
------------------------------------------------------------------------------------------
Key: AMQ-3231
URL: https://issues.apache.org/jira/browse/AMQ-3231
Project: ActiveMQ
Issue Type: Improvement
Components: Transport
Affects Versions: 5.4.2
Environment: STOMP
Reporter: Gary Tully
Assignee: Gary Tully
Fix For: 5.5.0
Logging of stomp CONNECT frame includes the raw passcode. This should be masked with "****"
so instead of:{code}22011-03-18 09:38:30,634 [38.171.43:40701] WARN TransportConnection - Failed to add Connection ID:xx.xx.38456-99-2:3, reason: java.lang.SecurityException: User name or password is invalid.
2011-03-18 09:38:30,634 [38.171.43:40701] WARN ProtocolConverter - Exception occurred processing:
CONNECT
host:big77
accept-version:1.0,1.1
passcode:bar
login:foo{code} it should be:{code}22011-03-18 09:38:30,634 [38.171.43:40701] WARN TransportConnection - Failed to add Connection ID:xx.xx.38456-99-2:3, reason: java.lang.SecurityException: User name or password is invalid.
2011-03-18 09:38:30,634 [38.171.43:40701] WARN ProtocolConverter - Exception occurred processing:
CONNECT
host:big77
accept-version:1.0,1.1
passcode:*****
login:foo{code}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (AMQ-3231) Stomp Frame should mask passcode
header in toString output, so it does not pollute the log
Posted by "Gary Tully (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/AMQ-3231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gary Tully resolved AMQ-3231.
-----------------------------
Resolution: Fixed
http://svn.apache.org/viewvc?rev=1083753&view=rev
> Stomp Frame should mask passcode header in toString output, so it does not pollute the log
> ------------------------------------------------------------------------------------------
>
> Key: AMQ-3231
> URL: https://issues.apache.org/jira/browse/AMQ-3231
> Project: ActiveMQ
> Issue Type: Improvement
> Components: Transport
> Affects Versions: 5.4.2
> Environment: STOMP
> Reporter: Gary Tully
> Assignee: Gary Tully
> Labels: Logging, STOMP
> Fix For: 5.5.0
>
>
> Logging of stomp CONNECT frame includes the raw passcode. This should be masked with "****"
> so instead of:{code}22011-03-18 09:38:30,634 [38.171.43:40701] WARN TransportConnection - Failed to add Connection ID:xx.xx.38456-99-2:3, reason: java.lang.SecurityException: User name or password is invalid.
> 2011-03-18 09:38:30,634 [38.171.43:40701] WARN ProtocolConverter - Exception occurred processing:
> CONNECT
> host:big77
> accept-version:1.0,1.1
> passcode:bar
> login:foo{code} it should be:{code}22011-03-18 09:38:30,634 [38.171.43:40701] WARN TransportConnection - Failed to add Connection ID:xx.xx.38456-99-2:3, reason: java.lang.SecurityException: User name or password is invalid.
> 2011-03-18 09:38:30,634 [38.171.43:40701] WARN ProtocolConverter - Exception occurred processing:
> CONNECT
> host:big77
> accept-version:1.0,1.1
> passcode:*****
> login:foo{code}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira