- Adding thumbprints validation logging improvements (#451)

vmware · May 3, 2018 · da43a71 · da43a71
1 parent 1469599
commit da43a71
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/h5c/vic-service/src/main/java/com/vmware/utils/ssl/ThumbprintTrustManager.java b/h5c/vic-service/src/main/java/com/vmware/utils/ssl/ThumbprintTrustManager.java
@@ -63,10 +63,13 @@ public static String getThumbprint(java.security.cert.X509Certificate cert) thro
    public static void checkThumbprint(String thumbprint) throws CertificateException {
 	   synchronized(ThumbprintTrustManager.class) {
 		   if (_thumbprints.contains(thumbprint)) {
+			   _logger.info("expected one of this thumbprints: " +_thumbprints + "\n" + "actual thumbprint: " + "["+thumbprint+"]" 
+					   + "...thumbprints matching ok!");
 			   return;
 		   }
 
-		   _logger.error("Server certificate chain is not trusted " + "and thumbprint doesn't match");
+		   _logger.error("Server certificate chain is not trusted " + "and thumbprint doesn't match\n" + "expected one " + "of this "
+				   + _thumbprints + "\n" + "actual: " + "["+ thumbprint +"]" + "...matching failed!!");
 		   throw new CertificateException("Server certificate chain is not trusted " + "and thumbprint doesn't match");
 	   }
    }