java - 限制 java ssl 调试日志记录

Question

使用 JVM 标志

-Djavax.net.debug=ssl

正在生成大量日志记录，即服务器上每个 SSL 事件的详细信息。无论如何只有它记录错误？或者可能这些标志中有一些更好的子集可以产生更整洁的输出

all            turn on all debugging
ssl            turn on ssl debugging

The following can be used with ssl:

    record       enable per-record tracing
    handshake    print each handshake message
    keygen       print key generation data
    session      print session activity
    defaultctx   print default SSL initialization
    sslctx       print SSLContext tracing
    sessioncache print session cache tracing
    keymanager   print key manager tracing
    trustmanager print trust manager tracing
    pluggability print pluggability tracing

    handshake debugging can be widened with:
    data         hex dump of each handshake message
    verbose      verbose handshake message printing

    record debugging can be widened with:
    plaintext    hex dump of record plaintext
    packet       print raw SSL/TLS packets

进一步阅读

• JavaSE 8:Java 安全套接字扩展 (JSSE) 引用指南:https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html
• JavaSE 8:调试 SSL/TLS 连接:https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/ReadDebug.html
• JavaSE 11:Java 安全套接字扩展 (JSSE) 引用指南:https://docs.oracle.com/en/java/javase/11/security/java-secure-socket-extension-jsse-reference-guide.html

Answer 1

使用附加 ssl 标志的格式是 ssl:[flag] 例如:

-Djavax.net.debug=ssl:record 或 -Djavax.net.debug=ssl:handshake。