From ecc76071c158eda48a0f2b4de3ce76c22913a0b4 Mon Sep 17 00:00:00 2001
From: Yves Rutschle <git1@rutschle.net>
Date: Sun, 8 Feb 2026 09:50:31 +0100
Subject: [PATCH] downgrade SNI matching logs from error to info to reduce log
 verboseness (Fix #520)

---
 ChangeLog | 4 ++++
 tls.c     | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 1e5b85d..01affff 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,6 +8,10 @@ vNEXT:
 	proxying can work. Removed sslh-select systemd file:
 	don't repeat the same configuration file!
 
+	Changed SNI matching log messages from
+	`msg_probe_error` to `msg_probe_info`: beware if you
+	happen to use them...
+
 v2.3.0:
 	Added `max_connections` setting to `listen` and
 	`protocol` configuration; see the
diff --git a/tls.c b/tls.c
index 5a0e64a..1eede32 100644
--- a/tls.c
+++ b/tls.c
@@ -277,7 +277,7 @@ has_match(const char** list, size_t list_len, const char* name, size_t name_len)
 
     for (i = 0; i < list_len; i++) {
         item = &list[i];
-        print_message(msg_probe_error, "matching [%.*s] with [%s]\n", (int)name_len, name, *item);
+        print_message(msg_probe_info, "matching [%.*s] with [%s]\n", (int)name_len, name, *item);
         if(!fnmatch(*item, name_nullterminated, 0)) {
             free(name_nullterminated);
             return 1;