限制java ssl调试日志记录 [英] limiting java ssl debug logging

问题描述

使用JVM标志

-Djavax.net.debug=ssl

正在产生大量的日志记录，即服务器上每个SSL事件的详细信息。反正只有它有日志错误？或者可能有一些更好的子集这些标志产生更整洁的输出

is producing a tremendous ammount of logging, the details for every SSL event on the server. Is there anyway to only have it log errors? or possibly there is some better subset of these flags that produce tidier output

all            turn on all debugging
ssl            turn on ssl debugging

The following can be used with ssl:

    record       enable per-record tracing
    handshake    print each handshake message
    keygen       print key generation data
    session      print session activity
    defaultctx   print default SSL initialization
    sslctx       print SSLContext tracing
    sessioncache print session cache tracing
    keymanager   print key manager tracing
    trustmanager print trust manager tracing
    pluggability print pluggability tracing

    handshake debugging can be widened with:
    data         hex dump of each handshake message
    verbose      verbose handshake message printing

    record debugging can be widened with:
    plaintext    hex dump of record plaintext
    packet       print raw SSL/TLS packets

推荐答案

使用附加 ssl 标志的格式为 ssl：[flag] 例如：

The format for using the additional ssl flags is ssl:[flag] for example:

-Djavax.net.debug = ssl：record 或 -Djavax.net.debug = ssl：handshake 。

这篇关于限制java ssl调试日志记录的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！