Added logging if certificate is expired

phax · Oct 31, 2024 · 3f96d3d · 3f96d3d
1 parent 1c6ba4f
commit 3f96d3d
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/phase4-peppol-client/src/main/java/com/helger/phase4/peppol/Phase4PeppolSender.java b/phase4-peppol-client/src/main/java/com/helger/phase4/peppol/Phase4PeppolSender.java
@@ -311,10 +311,12 @@ private static void _checkReceiverAPCert (@Nullable final X509Certificate aRecei
 
     if (eCertCheckResult.isInvalid ())
     {
-      throw new Phase4PeppolException ("The configured receiver AP certificate is not valid (at " +
-                                       aNow +
-                                       ") and cannot be used for sending. Aborting. Reason: " +
-                                       eCertCheckResult.getReason ());
+      final String sMsg = "The configured receiver AP certificate is not valid (at " +
+                          aNow +
+                          ") and cannot be used for sending. Aborting. Reason: " +
+                          eCertCheckResult.getReason ();
+      LOGGER.error (sMsg);
+      throw new Phase4PeppolException (sMsg);
     }
   }
 
@@ -798,7 +800,10 @@ protected ESuccess finishFields () throws Phase4Exception
       // Certificate from e.g. SMP lookup (may throw an exception)
       final X509Certificate aReceiverCert = m_aEndpointDetailProvider.getReceiverAPCertificate ();
       if (m_bCheckReceiverAPCertificate)
+      {
+        // Throws Phase4PeppolException in case of error
         _checkReceiverAPCert (aReceiverCert, m_aCertificateConsumer, ETriState.UNDEFINED, null);
+      }
       else
       {
         LOGGER.warn ("The check of the receiver's Peppol AP certificate was explicitly disabled.");