search

quinn-rs / quinn

Async-friendly QUIC implementation in Rust
Apache License 2.0
3.83k stars 391 forks source link

export keys for packet analysis #1121

Closed dvc94ch closed 3 years ago

dvc94ch commented 3 years ago

Since this is rusttls/noise agnostic it might make sense to put it in quinn-proto. When an environment variable is set the keys used for packet encryption should be written to a file. This allows packet analyzers to decrypt the traffic without leaking the private keys.

djc commented 3 years ago

Quinn already has support for enabling this in rustls:

https://github.com/quinn-rs/quinn/blob/main/quinn/src/builders.rs#L184

I think the Noise implementation (or, potentially the quinn-noise bridge) should take care of how to write out these keys.

dvc94ch commented 3 years ago

quinn-noise uses it's own customized noise implementation. have a wip quinn-noise implementation and a wip rust packet dissector that makes use of it.