Skip to content

Support SSLKEYLOGFILE environment variable #23989

Open
@satyarohith

Description

To debug encrypted traffic on the client side, utilities like Wireshark need encryption secrets. User applications generate a log file (contains encryption secrets) that can be consumed by Wireshark if you set SSLKEYLOGFILE environment variable or provide an appropriate flag.

The format used in log file is NSS Key Log Format (primary source returns 404).

SSL Key Log generation is supported by the following environments:

Edit: the implementation should be straightforward. Rustls already supports the environment variable.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    clirelated to cli/ dirsuggestionsuggestions for new features (yet to be agreed)tlsIssues related to TLS implementation

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions