hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Oleg Kalnichevski <ol...@apache.org>
Subject Re: logging httpclient.wire.content and SSL
Date Tue, 22 Mar 2011 09:57:05 GMT
On Mon, 2011-03-21 at 14:01 -0700, Monica_G wrote:
> Hi,
> 
> Is there a way to suppress logging of httpclient.wire.content for SSL
> connections?  The data being sent is sensitive information and I do not want
> it to show up in log files.  I realize I can configure my log4j.properties
> file to suppress logging this category, or log at INFO level or above. 
> However, if someone accidentally changes or replaces the log4j.properties
> file then the sensitive data could be logged.
> 
> Is there any other way to stop the httpclient.wire.content from being
> logged, or to at least have it log the encrypted format of the data?
> 
> I am using HTTPClient version 3.0.1.  I checked to see if a newer version
> would do what I asked above, but couldn't find it either.
> 
> Thank you
> 
> Monica
> 

Hi Monica

There is no way to completely disable wire logging in HC 3.x other than
patching the source.

In HC 4.x one can implement a custom connection class that does not log
any data.

Oleg



---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org


Mime
View raw message