Overview

In PKI Server 10.5 or older the debug log is implemented using a custom logging framework.

Configuration

The logging configuration is stored in /var/lib/pki/pki-tomcat//conf/CS.cfg:

debug.append=true
debug.enabled=true
debug.filename=/var/lib/pki/<instance>/logs/<subsystem>/debug
debug.hashkeytypes=
debug.level=0
debug.showcaller=false

Log Files

The logging framework does not support log rotation. All debug logs will be stored into /var/lib/pki/pki-tomcat/logs//debug.

Log Level

Level	Name	Description
0-4	OBNOXIOUS	most detailed
5-9	VERBOSE
>= 10	INFORM	least detailed

On Fedora the default level is 0. On RHEL the default level is 10.

The server must be restarted for the changes to become effective.

Pre-Installation

To change the debug level prior to running the installation, change the CS.cfg template in /usr/share/pki//conf.

Post-Installation

To change the debug level after the installation is complete, change the CS.cfg in /var/lib/pki/pki-tomcat//conf.