You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2026/05/13 11:57:00 UTC
(tomcat) 02/02: More explicit message and log at error rather than warning
This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 08bdec1243c2829d846b349a6c4ec4fc5152491d
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Wed May 13 12:30:01 2026 +0100
More explicit message and log at error rather than warning
Increase visibility as all certificates will be trusted in this
configuration.
---
.../catalina/tribes/membership/cloud/AbstractStreamProvider.java | 2 +-
.../apache/catalina/tribes/membership/cloud/LocalStrings.properties | 2 +-
webapps/docs/changelog.xml | 5 +++++
3 files changed, 7 insertions(+), 2 deletions(-)
diff --git a/java/org/apache/catalina/tribes/membership/cloud/AbstractStreamProvider.java b/java/org/apache/catalina/tribes/membership/cloud/AbstractStreamProvider.java
index 4add05b8d1..d0efb464e8 100644
--- a/java/org/apache/catalina/tribes/membership/cloud/AbstractStreamProvider.java
+++ b/java/org/apache/catalina/tribes/membership/cloud/AbstractStreamProvider.java
@@ -184,7 +184,7 @@ public abstract class AbstractStreamProvider implements StreamProvider {
throw e;
}
} else {
- log.warn(sm.getString("abstractStream.CACertUndefined"));
+ log.error(sm.getString("abstractStream.CACertUndefined"));
return INSECURE_TRUST_MANAGERS;
}
}
diff --git a/java/org/apache/catalina/tribes/membership/cloud/LocalStrings.properties b/java/org/apache/catalina/tribes/membership/cloud/LocalStrings.properties
index 4febddf80a..1448122345 100644
--- a/java/org/apache/catalina/tribes/membership/cloud/LocalStrings.properties
+++ b/java/org/apache/catalina/tribes/membership/cloud/LocalStrings.properties
@@ -13,7 +13,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
-abstractStream.CACertUndefined=CA cert file undefined
+abstractStream.CACertUndefined=CA cert file undefined. All certificates will be trusted.
abstractStream.connection=[{0}] opening connection: url [{1}], connectTimeout [{2}], readTimeout [{3}]
abstractStream.fileNotFound=CA cert file [{0}] not found
abstractStream.invalidTimeout=Neither connectTimeout [{0}] nor readTimeout [{1}] can be less than 0 for URLConnection
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 172556c33d..9efb014883 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -305,6 +305,11 @@
<code>AES/GCM/NoPadding</code>. (markt)
</scode>
<!-- Entries for backport and removal before 12.0.0-M1 below this line -->
+ <fix>
+ Expand wording and increase visibility of log message when cloud
+ membership is configured without a trust store as all certificates will
+ be trusted in this configuration. (markt)
+ </fix>
</changelog>
</subsection>
<subsection name="WebSocket">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org