From e0d4e5417919b131b28d8b57a3e7db9aec037095 Mon Sep 17 00:00:00 2001 From: Llaurence Date: Sun, 31 Mar 2019 13:55:02 +0200 Subject: [PATCH] use warn instead of error --- actix-http/src/cookie/secure/private.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actix-http/src/cookie/secure/private.rs b/actix-http/src/cookie/secure/private.rs index cba79900c..74352d72b 100644 --- a/actix-http/src/cookie/secure/private.rs +++ b/actix-http/src/cookie/secure/private.rs @@ -1,6 +1,6 @@ use std::str; -use log::error; +use log::warn; use ring::aead::{open_in_place, seal_in_place, Aad, Algorithm, Nonce, AES_256_GCM}; use ring::aead::{OpeningKey, SealingKey}; use ring::rand::{SecureRandom, SystemRandom}; @@ -63,7 +63,7 @@ impl<'a> PrivateJar<'a> { if let Ok(unsealed_utf8) = str::from_utf8(unsealed) { Ok(unsealed_utf8.to_string()) } else { - error!("Private cookie does not have utf8 content! + warn!("Private cookie does not have utf8 content! It is likely the secret key used to encrypt them has been leaked. Please change it as soon as possible."); Err("bad unsealed utf8")