NSS:Tracing: Difference between revisions
(Report the related bug number) |
(NSPR_LOG_MODULES -> MOZ_LOG) |
||
| (3 intermediate revisions by 2 users not shown) | |||
| Line 5: | Line 5: | ||
libPKIX uses the PR_LOG macro with log module name "pkix". | libPKIX uses the PR_LOG macro with log module name "pkix". | ||
You may enable logging output using | You may enable logging output using MOZ_LOG="pkix:5" | ||
In addition, you may have to use NSS_STRICT_SHUTDOWN="x" to ensure the pkix log module gets activated. This is the subject of [https://bugzilla.mozilla.org/show_bug.cgi?id=429039 bug 429039]. | In addition, you may have to use NSS_STRICT_SHUTDOWN="x" to ensure the pkix log module gets activated. This is the subject of [https://bugzilla.mozilla.org/show_bug.cgi?id=429039 bug 429039]. | ||
| Line 15: | Line 15: | ||
NSS_TRACE_OCSP="1" is supposed to enable OCSP tracing. However, it's not sufficient. | NSS_TRACE_OCSP="1" is supposed to enable OCSP tracing. However, it's not sufficient. | ||
It appears, you must enable logging for at least one module. It appears to be sufficient to request logging for any module, even if that module doesn't exit. If you're not interested in any other log output, you might even use | It appears, you must enable logging for at least one module. It appears to be sufficient to request logging for any module, even if that module doesn't exit. If you're not interested in any other log output, you might even use MOZ_LOG="any_random_string:5" | ||
This is the subject of [https://bugzilla.mozilla.org/show_bug.cgi?id=429052 bug 429052]. | |||
==SSL/TLS== | |||
If you have compiled NSS in debug mode, set environment variable SSLDEBUG to 1 in order to enable debug output. | |||
In addition, you should set variable SSLTRACE to the desired amount of details you want for SSL connections, valid numbers are from 0 to 127. The higher the number, the more details you'll get. | |||
You may set SSLDEBUGFILE to dump the output to a file of the given filename. | |||
Additional environment variables can be found, by search the NSS source code in directory nss/lib/ssl for the "getenv". | |||
[[Category:NSS]] | [[Category:NSS]] | ||
Latest revision as of 23:54, 24 August 2022
This page is meant to collect the various mechanism used to trace the runtime behavior of NSS. It might be necessary to use a debug build.
libPKIX
libPKIX uses the PR_LOG macro with log module name "pkix".
You may enable logging output using MOZ_LOG="pkix:5"
In addition, you may have to use NSS_STRICT_SHUTDOWN="x" to ensure the pkix log module gets activated. This is the subject of bug 429039.
OCSP
OCSP tracing uses PR_LogPrint.
NSS_TRACE_OCSP="1" is supposed to enable OCSP tracing. However, it's not sufficient.
It appears, you must enable logging for at least one module. It appears to be sufficient to request logging for any module, even if that module doesn't exit. If you're not interested in any other log output, you might even use MOZ_LOG="any_random_string:5"
This is the subject of bug 429052.
SSL/TLS
If you have compiled NSS in debug mode, set environment variable SSLDEBUG to 1 in order to enable debug output.
In addition, you should set variable SSLTRACE to the desired amount of details you want for SSL connections, valid numbers are from 0 to 127. The higher the number, the more details you'll get.
You may set SSLDEBUGFILE to dump the output to a file of the given filename.
Additional environment variables can be found, by search the NSS source code in directory nss/lib/ssl for the "getenv".