Graylog2 / Graylog2/graylog2-server
Feature: Add Debug info for TLS inputs
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 218
Description
When a certificate check fails in a TLS secured input, a Java exception is logged.
## Expected Behavior
Instead of the exception, a clear error message with information of the certificate would help debugging certificate issues. (such as the output of openssl req -text lines Subject, SAN) That would help checking that the certificate provided by the source is what is intended.
## Current Behavior
## Possible Solution
## Steps to Reproduce (for bugs)
1.
2.
3.
4.
## Context
## Your Environment
* Graylog Version: 2.4.5
* Elasticsearch Version: 5.6.9
* MongoDB Version: 3.4
* Operating System: Centos 7
* Browser version: not relevant
Contributor guide
Research direction
Start by locating the Java handling for certificate-check failures in TLS-secured inputs and review how the exception is currently logged. Reproduce a failed certificate check with the Graylog 2.4.5 environment described, then verify that the log presents useful certificate details such as Subject and SAN instead of only the exception.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100