<!DOCTYPE varlistentry [
	<!ENTITY from-version21 SYSTEM "version-2.1.xml">
]>
<varlistentry>
	<term><option>--tls-keylog</option> <replaceable>file</replaceable></term>
	<listitem>
		&from-version21;
		<para>
			Log TLS connection information to <replaceable>file</replaceable>.
			This option allows tools such as <command>tcpdump</command>,
			<command>wireshark</command> and <command>mqttshark</command>
			to decrypt TLS traffic and inspect the MQTT traffic. In Wireshark
			this can be done by setting the
			<option>(Pre)-Master-Secret log filename</option> option for the
			<option>Transport Layer Security</option> protocol.
		</para>
		<para>
			This option should be used for debugging only, it must not be used
			in production.
		</para>
	</listitem>
</varlistentry>
