<div dir="ltr"><div>That doesn't look like logback's output -</div><div>format of message doesn't correspond to your definition either.<br></div><div>Have you checked ssl-config logging configuration?</div><div><br></div><div><a href="http://typesafehub.github.io/ssl-config/DebuggingSSL.html">http://typesafehub.github.io/ssl-config/DebuggingSSL.html</a><br></div><div><a href="https://github.com/typesafehub/ssl-config/blob/master/ssl-config-akka/src/main/scala/com/typesafe/sslconfig/akka/util/AkkaLoggerBridge.scala">https://github.com/typesafehub/ssl-config/blob/master/ssl-config-akka/src/main/scala/com/typesafe/sslconfig/akka/util/AkkaLoggerBridge.scala</a><br></div><div><a href="http://doc.akka.io/docs/akka/current/scala/logging.html">http://doc.akka.io/docs/akka/current/scala/logging.html</a><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-07-26 4:43 GMT+03:00 Eric Swenson <span dir="ltr"><<a href="mailto:eric@swenson.org" target="_blank">eric@swenson.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">I have a utility (written in Scala and built with SBT) that includes a logback.xml:<div><br></div><div><pre style="background-color:#2b2b2b;color:#a9b7c6;font-family:'Menlo';font-size:12.0pt"><span style="color:#e8bf6a"><configuration </span><span style="color:#bababa">debug=</span><span style="color:#6a8759">"true"</span><span style="color:#e8bf6a">><br></span><span style="color:#e8bf6a"> <appender </span><span style="color:#bababa">name=</span><span style="color:#6a8759">"STDOUT"<br></span><span style="color:#6a8759"> </span><span style="color:#bababa">class=</span><span style="color:#6a8759">"ch.qos.logback.core.<wbr>ConsoleAppender"</span><span style="color:#e8bf6a">><br></span><span style="color:#e8bf6a"> <encoder </span><span style="color:#bababa">class=</span><span style="color:#6a8759">"ch.qos.logback.classic.<wbr>encoder.PatternLayoutEncoder"</span><span style="color:#e8bf6a">><br></span><span style="color:#e8bf6a"> <pattern></span>%d{ISO8601} | %-5level | %thread | %logger{1} | %m%n<span style="color:#e8bf6a"></pattern><br></span><span style="color:#e8bf6a"> </encoder><br></span><span style="color:#e8bf6a"> </appender><br></span><span style="color:#e8bf6a"><br></span><span style="color:#e8bf6a"> <logger </span><span style="color:#bababa">name=</span><span style="color:#6a8759">"com.typesafe.sslconfig.<wbr>ssl.ConfigSSLContextBuilder" </span><span style="color:#bababa">level=</span><span style="color:#6a8759">"ERROR" </span><span style="color:#e8bf6a">/><br></span><span style="color:#e8bf6a"> <logger </span><span style="color:#bababa">name=</span><span style="color:#6a8759">"com.typesafe.sslconfig.<wbr>ssl.AlgorithmChecker" </span><span style="color:#bababa">level=</span><span style="color:#6a8759">"ERROR" </span><span style="color:#e8bf6a">/><br></span><span style="color:#e8bf6a"><br></span><span style="color:#e8bf6a"> <root </span><span style="color:#bababa">level=</span><span style="color:#6a8759">"ERROR"</span><span style="color:#e8bf6a">><br></span><span style="color:#e8bf6a"> <appender-ref </span><span style="color:#bababa">ref=</span><span style="color:#6a8759">"STDOUT" </span><span style="color:#e8bf6a">/><br></span><span style="color:#e8bf6a"> </root><br></span><span style="color:#e8bf6a"><br></span><span style="color:#e8bf6a"></configuration><br></span></pre><div><br></div></div><div>I added the ‘debug=“true”’ to help me diagnose why, despite the <logger/> elements that attempt to set the loglevel of log messages from the packages defined in the “name” attribute to “ERROR”, I’m seeing “WARN” messages in the console output when I run the command. I fragment of the first few lines of output appears below:</div><div><br></div><div>java -jar xxx.jar <arguments></div><div><div>[WARN] [07/25/2017 17:05:59.490] [main] [com.typesafe.sslconfig.ssl.<wbr>ConfigSSLContextBuilder] validateStore: Skipping certificate with weak key size in thawtepremiumserverca: Certificate failed: cert = "1.2.840.113549.1.9.1=#<wbr>16197072656d69756d2d7365727665<wbr>72407468617774652e636f6d,CN=<wbr>Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA" failed on constraint RSA keySize < 2048, algorithm = RSA, keySize = 1024</div><div>[WARN] [07/25/2017 17:05:59.490] [main] [com.typesafe.sslconfig.ssl.<wbr>ConfigSSLContextBuilder] validateStore: Skipping certificate with weak key size in thawteserverca: Certificate failed: cert = "1.2.840.113549.1.9.1=#<wbr>16177365727665722d636572747340<wbr>7468617774652e636f6d,CN=Thawte Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA" failed on constraint RSA keySize < 2048, algorithm = RSA, keySize = 1024</div></div><div>….</div><div><div>[WARN] [07/25/2017 17:05:59.500] [main] [com.typesafe.sslconfig.ssl.<wbr>ConfigSSLContextBuilder] validateStore: Skipping certificate with weak key size in verisignclass1g2ca: Certificate failed: cert = "OU=VeriSign Trust Network,OU=(c) 1998 VeriSign\, Inc. - For authorized use only,OU=Class 1 Public Primary Certification Authority - G2,O=VeriSign\, Inc.,C=US" failed on constraint RSA keySize < 2048, algorithm = RSA, keySize = 1024</div><div>17:05:59,530 |-INFO in ch.qos.logback.classic.<wbr>LoggerContext[default] - Could NOT find resource [logback.groovy]</div><div>17:05:59,530 |-INFO in ch.qos.logback.classic.<wbr>LoggerContext[default] - Could NOT find resource [logback-test.xml]</div><div>17:05:59,530 |-INFO in ch.qos.logback.classic.<wbr>LoggerContext[default] - Found resource [logback.xml] at [jar:file:/Users/eswenson/<wbr>Projects/Modulus/ws/modulus-<wbr>shared-libraries/modules/<wbr>dataset-client-cli/target/<wbr>scala-2.11/dataset-client-cli-<wbr>assembly-1.0.dev.jar!/logback.<wbr>xml]</div><div>17:05:59,540 |-INFO in ch.qos.logback.core.joran.spi.<wbr>ConfigurationWatchList@<wbr>257cc1fc - URL [jar:file:/Users/eswenson/<wbr>Projects/Modulus/ws/modulus-<wbr>shared-libraries/modules/<wbr>dataset-client-cli/target/<wbr>scala-2.11/dataset-client-cli-<wbr>assembly-1.0.dev.jar!/logback.<wbr>xml] is not of type file</div><div>17:05:59,584 |-INFO in ch.qos.logback.core.joran.<wbr>action.AppenderAction - About to instantiate appender of type [ch.qos.logback.core.<wbr>ConsoleAppender]</div><div>17:05:59,586 |-INFO in ch.qos.logback.core.joran.<wbr>action.AppenderAction - Naming appender as [STDOUT]</div><div>17:05:59,616 |-INFO in ch.qos.logback.classic.joran.<wbr>action.LoggerAction - Setting level of logger [com.typesafe.sslconfig.ssl.<wbr>ConfigSSLContextBuilder] to ERROR</div><div>17:05:59,617 |-INFO in ch.qos.logback.classic.joran.<wbr>action.LoggerAction - Setting level of logger [com.typesafe.sslconfig.ssl.<wbr>AlgorithmChecker] to ERROR</div><div>17:05:59,617 |-INFO in ch.qos.logback.classic.joran.<wbr>action.RootLoggerAction - Setting level of ROOT logger to ERROR</div><div>17:05:59,617 |-INFO in ch.qos.logback.core.joran.<wbr>action.AppenderRefAction - Attaching appender named [STDOUT] to Logger[ROOT]</div><div>17:05:59,617 |-INFO in ch.qos.logback.classic.joran.<wbr>action.ConfigurationAction - End of configuration.</div><div>17:05:59,618 |-INFO in ch.qos.logback.classic.joran.<wbr>JoranConfigurator@5a67e962 - Registering current configuration as safe fallback point</div><div>[WARN] [07/25/2017 17:05:59.830] [main] [com.typesafe.sslconfig.ssl.<wbr>ConfigSSLContextBuilder] validateStore: Skipping certificate with weak key size in thawtepremiumserverca: Certificate failed: cert = "1.2.840.113549.1.9.1=#<wbr>16197072656d69756d2d7365727665<wbr>72407468617774652e636f6d,CN=<wbr>Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA" failed on constraint RSA keySize < 2048, algorithm = RSA, keySize = 1024</div></div><div>…</div><div><command output></div><div><br></div><div>There of two things of note in the output above: there are log messages that appear BEFORE we see the logging output due to the logback “debug=true” option. Second, we see many of these WARN messages from com.typesafe.sslconfig.ssl.<wbr>ConfigSSLContextBuilder both before and after the logback debug output.</div><div><br></div><div>Why is logback not suppressing the [WARN] messages? </div><div><br></div><div>The com.typesafe.sslconfig.ssl code uses akka.event.Logging. I’ve tried to look into this code, and quickly got lost. I’m not sure what low-level logging this package is using, but whatever it is, it isn’t being captured by logback. </div><div>I suspect I need to use some logback bridge, although I’ve tried various and get errors that I have multiple slf4j providers and it makes no difference to the logging output.</div><div><br></div><div>How do I track down what is going on here?</div><div><br></div></div><br>______________________________<wbr>_________________<br>
logback-user mailing list<br>
<a href="mailto:logback-user@qos.ch">logback-user@qos.ch</a><br>
<a href="http://mailman.qos.ch/mailman/listinfo/logback-user" rel="noreferrer" target="_blank">http://mailman.qos.ch/mailman/<wbr>listinfo/logback-user</a><br></blockquote></div><br></div>