Graylog2 / Graylog2/graylog2-server

Feature: Add Debug info for TLS inputs

Open
#4,838 0 comments 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 21h
Merged PRs (30d)
218

Description

When a certificate check fails in a TLS secured input, a Java exception is logged.

## Expected Behavior

Instead of the exception, a clear error message with information of the certificate would help debugging certificate issues. (such as the output of openssl req -text lines Subject, SAN) That would help checking that the certificate provided by the source is what is intended.

## Current Behavior

## Possible Solution

## Steps to Reproduce (for bugs)

1.
2.
3.
4.

## Context

## Your Environment

* Graylog Version: 2.4.5
* Elasticsearch Version: 5.6.9
* MongoDB Version: 3.4
* Operating System: Centos 7
* Browser version: not relevant

Contributor guide

Open the contributing guide

Research direction

Start by locating the Java handling for certificate-check failures in TLS-secured inputs and review how the exception is currently logged. Reproduce a failed certificate check with the Graylog 2.4.5 environment described, then verify that the log presents useful certificate details such as Subject and SAN instead of only the exception.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.