Commit 60dbb20
committed
Exclude TLS key password from chaincode server log
The constructor for the NettyGrpcServer implementation included an info
level log of all of the chaincode server properties, including the TLS
key password. While both the key and accompanying password are necessary
to allow the chaincode server to be impersonated, an attacker with
access to the chaincode server filesystem where the key is stored would
likely also have access to the logs containing the key password. The
password is sensitive information that should not be logged regardless.
Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>1 parent 2189bae commit 60dbb20
1 file changed
Lines changed: 0 additions & 1 deletion
Lines changed: 0 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
70 | 70 | | |
71 | 71 | | |
72 | 72 | | |
73 | | - | |
74 | 73 | | |
75 | 74 | | |
76 | 75 | | |
| |||
0 commit comments