mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-06 07:07:04 +02:00
Code Issues Projects Releases Wiki Activity

MINOR: ssl: Change level of ocsp-update logs

Browse Source 
The pure ocsp-update log used to be in log level "info" and it would be
mixed with actual traffic logs. This patch changes it to level "notice".
This commit is contained in:
Remi Tricot-Le Breton 2024-03-20 14:13:37 +01:00 committed by William Lallemand
parent d4eeaa4003
commit 328a893713
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/configuration.txt
View File

@ -16095,12 +16095,12 @@ ocsp-update [ off | on ] (crt-list only)
Here are two examples of such log lines, with a successful OCSP update log Here are two examples of such log lines, with a successful OCSP update log
line first and then an example of an HTTP error with the two different lines line first and then an example of an HTTP error with the two different lines
(lines were spit and the URL was shortened for readability): (lines were spit and the URL was shortened for readability):
<134>Mar 6 11:16:53 haproxy[14872]: <OCSP-UPDATE> /path_to_cert/foo.pem 1 \ <133>Mar 6 11:16:53 haproxy[14872]: <OCSP-UPDATE> /path_to_cert/foo.pem 1 \
"Update successful" 0 1 "Update successful" 0 1
<134>Mar 6 11:18:55 haproxy[14872]: <OCSP-UPDATE> /path_to_cert/bar.pem 2 \ <133>Mar 6 11:18:55 haproxy[14872]: <OCSP-UPDATE> /path_to_cert/bar.pem 2 \
"HTTP error" 1 0 "HTTP error" 1 0
<134>Mar 6 11:18:55 haproxy[14872]: -:- [06/Mar/2023:11:18:52.200] \ <133>Mar 6 11:18:55 haproxy[14872]: -:- [06/Mar/2023:11:18:52.200] \
<OCSP-UPDATE> -/- 2/0/-1/-1/3009 503 217 - - SC-- 0/0/0/0/3 0/0 {} \ <OCSP-UPDATE> -/- 2/0/-1/-1/3009 503 217 - - SC-- 0/0/0/0/3 0/0 {} \
"GET http://127.0.0.1:12345/MEMwQT HTTP/1.1" "GET http://127.0.0.1:12345/MEMwQT HTTP/1.1"

2
src/ssl_ocsp.c
View File

@ -1130,7 +1130,7 @@ static void ssl_ocsp_send_log()
status_str = istptr(ocsp_update_errors[ssl_ocsp_task_ctx.update_status]); status_str = istptr(ocsp_update_errors[ssl_ocsp_task_ctx.update_status]);
} }
send_log(httpclient_ocsp_update_px, LOG_INFO, "%s %s %u \"%.*s\" %u %u", send_log(httpclient_ocsp_update_px, LOG_NOTICE, "%s %s %u \"%.*s\" %u %u",
httpclient_ocsp_update_px->id, httpclient_ocsp_update_px->id,
ocsp->path, ocsp->path,
ssl_ocsp_task_ctx.update_status, ssl_ocsp_task_ctx.update_status,