Support for SSLKEYLOGFILE

tlsfuzzer / tlslite-ng

TLS implementation in pure python, focused on interoperability testing

Other

236 stars 81 forks source link

Support for SSLKEYLOGFILE #523

Open tomato42 opened 5 months ago

tomato42 commented 5 months ago

Discussed in https://github.com/tlsfuzzer/tlslite-ng/discussions/522

^{Originally posted by **octaviandumitran** June 28, 2024} Can you add functionality to generate a key log file? This should be something similar to what Python3.8+ does when SSLKEYLOGFILE is defined. Alternatively, could you explain how I can generate the file myself? Presumably, I would need to call keyingMaterialExporter, but I do not know exactly how to serialize that.

westurner commented 2 months ago

https://github.com/cloudflare/tls-tris/blob/7bb4b4617ebad96fc8c48b0729f9386904e0ae52/common.go#L980-L994 logLine := []byte(fmt.Sprintf("%s %x %x\n", what, clientRandom, masterSecret))
https://github.com/segevfiner/sslkeylog/blob/main/sslkeylog.py
https://github.com/segevfiner/sslkeylog/blob/main/_sslkeylog.c
https://github.com/wpbrown/openssl-keylog/blob/main/sslkeylog.c

draft-ietf-tls-keylogfile-02: "The SSLKEYLOGFILE Format for TLS" https://datatracker.ietf.org/doc/html/draft-ietf-tls-keylogfile-02