NLnetLabs / nsd

The NLnet Labs Name Server Daemon (NSD) is an authoritative, RFC compliant DNS nameserver.
https://nlnetlabs.nl/nsd
BSD 3-Clause "New" or "Revised" License
444 stars 101 forks source link

Update log levels for Mutual TLS #369

Open k0ekk0ek opened 1 month ago

k0ekk0ek commented 1 month ago

Currently errors related to certificates for Mutual TLS are logged via DEBUG. Which means they are not available in release builds. Use a method, like normal log at level 5 or so to allow for more convenient debugging. See #362 for more details.

bilias commented 1 month ago

Notes:

Some common certificate errors I believe we should log in normal logging (5 or something else) with an clear message explaining the exact problem to the operator:

Maybe some of them are already covered, I just wanted to document all possible (common) scenarios.