SSLLogger.java (was Re: Code Review Request: TLS 1.3 Implementation)
Xuelei Fan
xuelei.fan at oracle.com
Thu Jun 7 01:51:24 UTC 2018
In this implementation, the SunJSSE logging is updated to (the class
comment lines):
/**
* Implementation of SSL logger.
*
* If the system property "javax.net.debug" is not defined, the debug
logging
* is turned off. If the system property "javax.net.debug" is defined as
* empty, the debug logger is specified by
System.getLogger("javax.net.ssl"),
* and applications can customize and configure the logger or use external
* logging mechanisms. If the system property "javax.net.debug" is defined
* and non-empty, a private debug logger implemented in this class is used.
*/
On 6/6/2018 6:37 PM, Weijun Wang wrote:
> But will any application use the logger named "javax.net.debug"? I think that's only for JSSE.
>
If using System Logger, the "javax.net.debug" system property will be
used to turn on/off the logger (define with empty or not defined).
Xuelei
>> On Jun 7, 2018, at 9:35 AM, Xuelei Fan<xuelei.fan at oracle.com> wrote:
>>
>> I see your concerns now. Currently, we don't fine the format if using System logger. Applications can define the format and output style for themselves if needed. That's also the purpose why we introduce the System Logger in the provider.
More information about the security-dev
mailing list