Skip to content

Migrate to Log4j 2 using the 1/2 bridge. #63

@marco-brandizi

Description

@marco-brandizi

Use this to change all Ondex modules so that:

  • They depend on log4j-api-2
  • They also depend on log4j-1.2-api, which will reroute all Log4j v1 to version 2 (ie, to the API above)
  • Same for slf4j and common logging (TODO: link to bridges), but Log4j v1 is a priority
  • Modules that use a concrete implementation of any logger, migrate to log4j-core as their implementation
    (so that all of the above is re-routed).
    • This also requires that the log4j.xml files are migrated to v2 (YAML flavour preferrable)
    • A good way to deal with the config files is downloading them from a single place (like the data module)

This is to address the recent security issues discovered with old Log4j. It has not a very high priority, since said issues are relevant only for web servers, yet, the migration above would remove many warnings triggered by dependabots and IT people.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions