diff --git a/h5c/vic-service/src/main/java/com/vmware/utils/ssl/ThumbprintTrustManager.java b/h5c/vic-service/src/main/java/com/vmware/utils/ssl/ThumbprintTrustManager.java index 8d0e3d522..e3dc8ad1c 100644 --- a/h5c/vic-service/src/main/java/com/vmware/utils/ssl/ThumbprintTrustManager.java +++ b/h5c/vic-service/src/main/java/com/vmware/utils/ssl/ThumbprintTrustManager.java @@ -63,10 +63,13 @@ public static String getThumbprint(java.security.cert.X509Certificate cert) thro public static void checkThumbprint(String thumbprint) throws CertificateException { synchronized(ThumbprintTrustManager.class) { if (_thumbprints.contains(thumbprint)) { + _logger.info("expected one of this thumbprints: " +_thumbprints + "\n" + "actual thumbprint: " + "["+thumbprint+"]" + + "...thumbprints matching ok!"); return; } - _logger.error("Server certificate chain is not trusted " + "and thumbprint doesn't match"); + _logger.error("Server certificate chain is not trusted " + "and thumbprint doesn't match\n" + "expected one " + "of this " + + _thumbprints + "\n" + "actual: " + "["+ thumbprint +"]" + "...matching failed!!"); throw new CertificateException("Server certificate chain is not trusted " + "and thumbprint doesn't match"); } }