Log/debug upstream TLS connections

[caddybro]

Is there some way to log/debug parameters for TLS connections from g3proxy to an upstream server?
Most important would be the server certificate (chain).
You can get the leaf certificate from the g3proxy-g3fcgen connection via Wireshark manually.
But that's a bit complicated.
Are there other ways or could there be an option for directly logging those to a file?

[zh-jq]

No, not yet.

It's possible to add more fields to the TlsHandshake / StartTlsHandshake intercept log, but it will be too large to log a full leaf cert. One possible way is to log the server cert in g3fcgen log when generate new fake certs.

[caddybro]

Do you have a config example for that?
I tried to add "log: stdout" and others to the g3fcgen yaml. (Which didn't work).
Starting g3fcgen with debugging/more verbosity does give some more info on cert generation but does not print the upstream cert itself.

[zh-jq]

It's not implemented yet. You can submit a PR to do it.