SSLLogger.java (was Re: Code Review Request: TLS 1.3 Implementation)

Xuelei Fan xuelei.fan at oracle.com
Thu Jun 7 01:51:24 UTC 2018


In this implementation, the SunJSSE logging is updated to (the class 
comment lines):

/**
  * Implementation of SSL logger.
  *
  * If the system property "javax.net.debug" is not defined, the debug 
logging
  * is turned off.  If the system property "javax.net.debug" is defined as
  * empty, the debug logger is specified by 
System.getLogger("javax.net.ssl"),
  * and applications can customize and configure the logger or use external
  * logging mechanisms.  If the system property "javax.net.debug" is defined
  * and non-empty, a private debug logger implemented in this class is used.
  */

On 6/6/2018 6:37 PM, Weijun Wang wrote:
> But will any application use the logger named "javax.net.debug"?  I think that's only for JSSE.
> 
If using System Logger, the "javax.net.debug" system property will be 
used to turn on/off the logger (define with empty or not defined).

Xuelei

>> On Jun 7, 2018, at 9:35 AM, Xuelei Fan<xuelei.fan at oracle.com>  wrote:
>>
>> I see your concerns now.  Currently, we don't fine the format if using System logger.  Applications can define the format and output style for themselves if needed.  That's also the purpose why we introduce the System Logger in the provider.



More information about the security-dev mailing list