Sensitive data filter slightly inverted?

[sfayer]

Hi,

Looking through a log on our DIRAC server, I noticed a slightly weird thing: There is occasionally a redacted log message, but the thing that's removed from the message is the certificate and not the key!

 'proxyString': '***REDACTED***\n-----BEGIN PRIVATE KEY-----\nMIIABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEFABCDEF...===\n-----END PRIVATE KEY-----\n***REDACTED***\n***REDACTED***\n***REDACTED***\n***REDACTED***\n***REDACTED***\n***REDACTED***\n'...

DIRAC/src/DIRAC/Resources/LogFilters/SensitiveDataFilter.py

Line 45 in e02d21f

r"-----BEGIN CERTIFICATE-----.*?-----END CERTIFICATE-----",

Did you perhaps mean to use PRIVATE KEY rather than CERTIFICATE there?

Regards,
Simon

[aldbr]

Oops indeed, I will fix that 😅