From 449c6e01120ca78d7018818442df7585716adc65 Mon Sep 17 00:00:00 2001 From: PJ Fanning Date: Thu, 27 Aug 2026 15:04:04 +0100 Subject: [PATCH] fix: log the classic hostname verification warning at warning level ### Motivation Both remoting transports log when TLS is enabled without hostname verification, but at different levels. Artery logs at `warning`, classic remoting at `info`, where it is easily lost in startup output. Both carry the `LogMarker.Security` marker, which the documentation tells operators to treat as security relevant, so the lower level in classic understates it. ### Modification Log the classic remoting message at `warning`, matching artery. The message text is unchanged, as is the `LogMarker.Security` marker. ### Result Both transports report a disabled hostname verification at the same level. ### Tests No test asserts on this message or its level. ### References None - noticed while reviewing #3478 --- .../apache/pekko/remote/transport/netty/SSLEngineProvider.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala b/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala index 5a6f87cc10b..3c80f31f71e 100644 --- a/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala +++ b/remote/src/main/scala/org/apache/pekko/remote/transport/netty/SSLEngineProvider.scala @@ -84,7 +84,7 @@ class ConfigSSLEngineProvider(protected val log: MarkerLoggingAdapter, private v if (SSLHostnameVerification) log.debug("TLS/SSL hostname verification is enabled.") else - log.info( + log.warning( LogMarker.Security, "TLS/SSL hostname verification is disabled. " + "Set pekko.remote.classic.netty.ssl.security.hostname-verification=on to enable.")