This is an automated email from the ASF dual-hosted git repository.

csutherl pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/10.1.x by this push:
     new d94548e512 Lower the log level to debug when OpenSSL initialization 
fails to avoid nasty stack traces and gracefully fail when natives aren't 
present
d94548e512 is described below

commit d94548e5124837823c720f511fd698bf556324e3
Author: Coty Sutherland <[email protected]>
AuthorDate: Wed May 6 21:52:59 2026 -0400

    Lower the log level to debug when OpenSSL initialization fails to avoid 
nasty stack traces and gracefully fail when natives aren't present
---
 java/org/apache/catalina/core/OpenSSLLifecycleListener.java | 4 +++-
 webapps/docs/changelog.xml                                  | 8 ++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/java/org/apache/catalina/core/OpenSSLLifecycleListener.java 
b/java/org/apache/catalina/core/OpenSSLLifecycleListener.java
index ba8c082b53..facd2529df 100644
--- a/java/org/apache/catalina/core/OpenSSLLifecycleListener.java
+++ b/java/org/apache/catalina/core/OpenSSLLifecycleListener.java
@@ -59,7 +59,9 @@ public class OpenSSLLifecycleListener implements 
LifecycleListener {
                     } catch (Throwable t) {
                         Throwable throwable = 
ExceptionUtils.unwrapInvocationTargetException(t);
                         ExceptionUtils.handleThrowable(throwable);
-                        log.error(sm.getString("openssllistener.sslInit"), 
throwable);
+                        if (log.isDebugEnabled()) {
+                            log.debug(sm.getString("openssllistener.sslInit"), 
throwable);
+                        }
                     }
                 }
             }
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 22e22e1a0e..7c48ab7b1b 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -120,6 +120,14 @@
 <section name="Tomcat 10.1.55 (schultz)" rtext="release in progress">
   <subsection name="Catalina">
     <changelog>
+      <fix>
+        Lower the log level to debug when OpenSSL initialization fails in
+        <code>OpenSSLLifecycleListener</code> to avoid stack traces
+        when <code>libssl.so</code> is not present and to align the behavior
+        of the <code>isAvailable()</code> check with the
+        <code>AprLifecycleListener<code> and gracefully fail when natives
+        are not present. (csutherl)
+      </fix>
       <add>
         Enhance <code>version.sh</code> and <code>version.bat</code> to display
         APR, Tomcat Native, and OpenSSL version information (both APR and FFM


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to