Skip to content
This repository has been archived by the owner on Apr 22, 2023. It is now read-only.

Optionally log master secrets for TLS connections #25452

Closed
jsha opened this issue May 27, 2015 · 2 comments
Closed

Optionally log master secrets for TLS connections #25452

jsha opened this issue May 27, 2015 · 2 comments

Comments

@jsha
Copy link

jsha commented May 27, 2015

Sometimes it's necessary to decrypt your own TLS connections to debug their contents. Wireshark supports this quite nicely with its decryption feature. For non-DH key agreement, you simply provide the private key of the server. However, for DH key agreement, or when you are acting only as a client, that doesn't work. Firefox and Chrome support the environment variable SSLKEYLOGFILE to write the master secrets used to a file, for decryption by Wireshark. It would be great to support this or a similar mechanism for logging master secrets in Node.

Key log format: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format
Helpful Stack Exchange howto: https://security.stackexchange.com/questions/35639/decrypting-tls-in-wireshark-when-using-dhe-rsa-ciphersuites/42350#42350
Wireshark decryption docs: https://wiki.wireshark.org/SSL

@jasnell
Copy link
Member

jasnell commented Jun 24, 2015

@jsha ... can you open this against either nodejs/io.js or nodejs/node instead? It's not likely that this would land in v0.10 or v0.12 here.

@jasnell
Copy link
Member

jasnell commented Jun 24, 2015

See: nodejs/node#59

@jasnell jasnell closed this as completed Jun 24, 2015
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants