JSSE Debug Log redirection

[Bernd Eckenfels]

Hello Andrew,

the Main issue is, that the stdout redirection does no longer work with the internal logger, so code changes in applications are needed to get that functionality back.

BTW When using a new JUL logger (which only works in OpenJDK) the problem is that the trace messages with hexdump use a unreferenced parameter (no matching format string), so the usual logger bridges/manager for JUL logging also won’t translate those strings. So when you try to change the logger support for this, you might also need to adjust your log impl (it looks like JBoss does not show those parameters in the log record).

It also looks like some truststores traces no longer show up, maybe they still check for the component in the ssl.debug property - will need to investigate that later.

Gruss
Bernd

Ps: i still like the java 8u codebase to be united again :)
--
http://bernd.eckenfels.net

________________________________
Von: Andrew Hughes <gnu.andrew at redhat.com>
Gesendet: Mittwoch, November 4, 2020 7:30 PM
An: Bernd
Cc: jdk8u-dev
Betreff: Re: JSSE Debug Log redirection

On 23:57 Tue 03 Nov     , Bernd wrote:
> Hello,
>
> need to add to this: the mixed logging output seems to be only a problem in
> the Oracle binaries, with AdoptOpenJDK and Zulu it works if I specify an
> empty javax.net.debug.
>
> So I might be able to work around this with a JUL logging bridge (on Zulu)
> as long as I do not specify =all as a value.
>
> (And Oracle really should consider opening their repos so that we dont have
> two forks both with partial broken backports :)
>
> Gruss
> Bernd
>

I'm afraid there's nothing we can do about Oracle's sources :)
You probably need to file a bug at bugs.java.com.

If there are issues with the OpenJDK 8u backport of TLS v1.3,
as used by AdoptOpenJDK & Zulu's binaries, we'll be happy
to look into it with an appropriate reproducer.

Thanks,
--
Andrew :)

Senior Free Java Software Engineer
OpenJDK Package Owner
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222