crypt: encryption/decryption of messages: DANGER! private: displays private information: DANGER!
I believe the idea behind private is that it dumps just enough information for commands like tcpdump to decrypt packets (see ikev2_logParentSA()) and perhaps recover DH material? With that in mind I suspect most of the DBG_PRIVATE calls should be DBG_CRYPT? thoughts?
_______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
