summaryrefslogtreecommitdiffstats
path: root/ipapython/nsslib.py
diff options
context:
space:
mode:
authorFraser Tweedale <ftweedal@redhat.com>2015-11-20 15:39:00 +1100
committerJan Cholasta <jcholast@redhat.com>2015-11-23 11:05:49 +0100
commit2be8d2d068557631813607d84bb03c91fbeaaf80 (patch)
tree84dd82a3b8629ce2bf486de51b0316842e112e84 /ipapython/nsslib.py
parent72b03a5d7931635b8563e374f217fa48c729450b (diff)
downloadfreeipa-2be8d2d068557631813607d84bb03c91fbeaaf80.tar.gz
freeipa-2be8d2d068557631813607d84bb03c91fbeaaf80.tar.xz
freeipa-2be8d2d068557631813607d84bb03c91fbeaaf80.zip
TLS and Dogtag HTTPS request logging improvements
Pretty printing the TLS peer certificate to logs on every request introduces a lot of noise; do not log it (subject name, key usage and validity are still logged). Fix and tidy up some HTTP logging messages for Dogtag requests. Part of: https://fedorahosted.org/freeipa/ticket/5269 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipapython/nsslib.py')
-rw-r--r--ipapython/nsslib.py3
1 files changed, 0 insertions, 3 deletions
diff --git a/ipapython/nsslib.py b/ipapython/nsslib.py
index 5ae79b65c..06e53294f 100644
--- a/ipapython/nsslib.py
+++ b/ipapython/nsslib.py
@@ -48,9 +48,6 @@ def auth_certificate_callback(sock, check_sig, is_server, certdb):
cert = sock.get_peer_certificate()
- root_logger.debug("auth_certificate_callback: check_sig=%s is_server=%s\n%s",
- check_sig, is_server, str(cert))
-
pin_args = sock.get_pkcs11_pin_arg()
if pin_args is None:
pin_args = ()