Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support SSLKEYLOGFILE environment variable #23989

Open
satyarohith opened this issue May 27, 2024 · 0 comments
Open

Support SSLKEYLOGFILE environment variable #23989

satyarohith opened this issue May 27, 2024 · 0 comments
Labels
cli related to cli/ dir suggestion suggestions for new features (yet to be agreed) tls Issues related to TLS implementation

Comments

@satyarohith
Copy link
Member

satyarohith commented May 27, 2024

To debug encrypted traffic on the client side, utilities like Wireshark need encryption secrets. User applications generate a log file (contains encryption secrets) that can be consumed by Wireshark if you set SSLKEYLOGFILE environment variable or provide an appropriate flag.

The format used in log file is NSS Key Log Format (primary source returns 404).

SSL Key Log generation is supported by the following environments:

Edit: the implementation should be straightforward. Rustls already supports the environment variable.

@lucacasonato lucacasonato added cli related to cli/ dir suggestion suggestions for new features (yet to be agreed) tls Issues related to TLS implementation and removed proposal labels Jun 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cli related to cli/ dir suggestion suggestions for new features (yet to be agreed) tls Issues related to TLS implementation
Projects
None yet
Development

No branches or pull requests

2 participants