vault: improve seal/unseal log messages

This commit is contained in:
Armon Dadgar
2015-03-13 11:34:40 -07:00
parent ec99c1514b
commit 2d7436b840

View File

@@ -372,16 +372,19 @@ func (c *Core) Unseal(key []byte) (bool, error) {
if err := c.barrier.Unseal(masterKey); err != nil { if err := c.barrier.Unseal(masterKey); err != nil {
return false, err return false, err
} }
c.logger.Printf("[INFO] core: vault is unsealed")
// Do post-unseal setup // Do post-unseal setup
c.logger.Printf("[INFO] core: post-unseal setup starting")
if err := c.postUnseal(); err != nil { if err := c.postUnseal(); err != nil {
c.logger.Printf("[ERR] core: post-unseal setup failed: %v", err) c.logger.Printf("[ERR] core: post-unseal setup failed: %v", err)
c.barrier.Seal() c.barrier.Seal()
c.logger.Printf("[WARN] core: vault is sealed")
return false, err return false, err
} }
c.logger.Printf("[INFO] core: post-unseal setup complete")
// Success! // Success!
c.logger.Printf("[INFO] core: vault is unsealed")
c.sealed = false c.sealed = false
return true, nil return true, nil
} }
@@ -397,13 +400,18 @@ func (c *Core) Seal() error {
c.sealed = true c.sealed = true
// Do pre-seal teardown // Do pre-seal teardown
c.logger.Printf("[INFO] core: pre-seal teardown starting")
if err := c.preSeal(); err != nil { if err := c.preSeal(); err != nil {
c.logger.Printf("[ERR] core: pre-seal teardown failed: %v", err) c.logger.Printf("[ERR] core: pre-seal teardown failed: %v", err)
return fmt.Errorf("internal error") return fmt.Errorf("internal error")
} }
c.logger.Printf("[INFO] core: pre-seal teardown complete")
c.logger.Printf("[INFO] core: vault is being sealed") if err := c.barrier.Seal(); err != nil {
return c.barrier.Seal() return err
}
c.logger.Printf("[INFO] core: vault is sealed")
return nil
} }
// postUnseal is invoked after the barrier is unsealed, but before // postUnseal is invoked after the barrier is unsealed, but before