Skip to content

Fail TLS connections when an Ssl key store or trust store cannot be loaded. - #4337

Open
ramanathan1504 wants to merge 1 commit into
2.xfrom
fix/2.x/ssl-fail-closed
Open

Fail TLS connections when an Ssl key store or trust store cannot be loaded.#4337
ramanathan1504 wants to merge 1 commit into
2.xfrom
fix/2.x/ssl-fail-closed

Conversation

@ramanathan1504

@ramanathan1504 ramanathan1504 commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

Fixes #4332

@ramanathan1504

ramanathan1504 commented Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

@ppkarwasz A null Ssl makes SocketAppender send plaintext over the default TCP, so for #4332 I kept Ssl building with an SSLContext that rejects every handshake. Is that enough for 2.x, or should the Socket, Http and SMTP appenders also refuse to start?

@ramanathan1504 ramanathan1504 added bug Incorrect, unexpected, or unintended behavior of existing code java Pull requests that update Java code configuration Affects the configuration system in a general way port-to-main port-to-2.26.x labels Sep 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bug Incorrect, unexpected, or unintended behavior of existing code configuration Affects the configuration system in a general way java Pull requests that update Java code port-to-2.26.x port-to-main

Projects

Log4j pull request tracker
Status: No status

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Fail closed when a KeyStore or TrustStore element of Ssl cannot be loaded

1 participant

@ramanathan1504