feat: support the SSLKEYLOGFILE environment variable for clients#1102
feat: support the SSLKEYLOGFILE environment variable for clients#1102bgeron wants to merge 1 commit intohyperium:masterfrom
Conversation
Nothing changes unless SSLKEYLOGFILE is set in the environment. If SSLKEYLOGFILE is set, then every time the client connnects, it will append a line to the file designated in SSLKEYLOGFILE with the pre-master secret for that connection. Point a tool like Wireshark to that file, and suddenly it can decode the TLS conversations. https://wiki.wireshark.org/TLS#using-the-pre-master-secret https://docs.rs/rustls/0.20.6/rustls/struct.KeyLogFile.html https://docs.rs/rustls/0.20.6/rustls/trait.KeyLog.html
|
I am leaning to not including this in tonic since its possible to configure this manually via rustls. The support for tls within tonic is quite primitive and will actually be removed in the future. So I recommend moving away from using the |
|
Short of implementing a TLS connector myself, I think it's not possible to configure this manually. I can specify the Alternatively I could make this a boolean flag to go into But if you want to take TLS out of Tonic, I respect that of course. Thank you for making/maintaining Tonic. |
|
Yes, I would use the |
|
I would love to have this for local debugging |
3 participants
Nothing changes unless SSLKEYLOGFILE is set in the environment.
If SSLKEYLOGFILE is set, then every time the client connnects, it will append a line to the file designated in SSLKEYLOGFILE with the pre-master secret for that connection.
Point a tool like Wireshark to that file, and suddenly it can decode the TLS conversations.
https://wiki.wireshark.org/TLS#using-the-pre-master-secret
https://docs.rs/rustls/0.20.6/rustls/struct.KeyLogFile.html
https://docs.rs/rustls/0.20.6/rustls/trait.KeyLog.html