kresd: get more out of TLS logging when --verbose (!287) · Merge requests · Knot projects / Knot Resolver · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Daniel Kahn Gillmor requested to merge dkg/resolver:better-gnutls-logging into master Apr 27, 2017

GnuTLS doesn't actually log very much at log level 1.

It currently logs things at the following levels:

level 3: asserts
level 4: handshake information
level 5: record-layer information
level 9: session keys, IVs, and internal secrets
level 10: raw network read and buffering information

level 5 seems like the right layer for "verbose", without leaking too much sensitive stuff.