From a096df1fc30cc44ab01aa10bd1f72b33fd477b10 Mon Sep 17 00:00:00 2001 From: Garrett D'Amore Date: Sun, 14 Sep 2025 17:19:08 -0700 Subject: mbedtls: reduce logging for debug crypto to debug log Warning level was just too noisy. --- src/supplemental/tls/mbedtls/mbedtls.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/supplemental/tls/mbedtls/mbedtls.c b/src/supplemental/tls/mbedtls/mbedtls.c index 949f06d9..71393360 100644 --- a/src/supplemental/tls/mbedtls/mbedtls.c +++ b/src/supplemental/tls/mbedtls/mbedtls.c @@ -147,6 +147,14 @@ tls_log_warn(const char *msgid, const char *context, int errnum) nng_log_warn(msgid, "%s: %d - %s", context, errnum, errbuf); } +static void +tls_log_debug(const char *msgid, const char *context, int errnum) +{ + char errbuf[256]; + mbedtls_strerror(errnum, errbuf, sizeof(errbuf)); + nng_log_debug(msgid, "%s: %d - %s", context, errnum, errbuf); +} + // tls_mk_err converts an mbed error to an NNG error. static struct { int tls; @@ -349,7 +357,9 @@ conn_handshake(nng_tls_engine_conn *ec) return (0); default: - tls_log_warn("NNG-TLS-HANDSHAKE", "TLS handshake failed", rv); + // only at debug, because its too noisy otherwise (the crypto + // failure will still show up) + tls_log_debug("NNG-TLS-HANDSHAKE", "TLS handshake failed", rv); return (tls_mk_err(rv)); } } -- cgit v1.2.3-70-g09d2