Skip to content

Commit

Permalink
Remove token password from destroy logs
Browse files Browse the repository at this point in the history
In case of failure of the `sslget` command, during `pkidestroy`, the log will contain the full list of option including the token password.
This has been obfuscated before the failure is logged.

Solve RHCS-4547
  • Loading branch information
fmarco76 committed Oct 30, 2023
1 parent 48c41a8 commit 71bf161
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions base/server/python/pki/server/deployment/pkihelper.py
Original file line number Diff line number Diff line change
Expand Up @@ -2454,6 +2454,7 @@ def update_domain_using_agent_port(
logger.warning(
log.PKIHELPER_SECURITY_DOMAIN_UNREACHABLE_1,
secname)
exc.cmd[4] = '******'
logger.error(log.PKI_SUBPROCESS_ERROR_1, exc)
if critical_failure:
raise
Expand Down

0 comments on commit 71bf161

Please sign in to comment.