apache / apache/pekko-http

support `SSHKEYLOGFILE`

Open
#679 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Scala
Stars
196
Forks
55
Avg merge
4d 52m
Merged PRs (30d)
74

Description

When serving TLS connections, some applications support setting a `SSHKEYLOGFILE` environment variable so that the application can dump the key material in there, and tools like Wireshark can [pick it up](https://wiki.wireshark.org/TLS) and show the decrypted traffic.

It is possible that this is already possible with Pekko HTTP as well (possibly using a tool such as https://github.com/jsslkeylog/jsslkeylog), or perhaps some changes are needed.

It would be great if someone could look into this and either document how to do it or make an overview of the changes that would be needed.

Contributor guide

Open the contributing guide

Research direction

Start by checking Pekko HTTP's TLS serving configuration and whether SSHKEYLOGFILE is already supported. Compare the possible jsslkeylog approach with Wireshark's TLS key-log requirements. Done means documenting a working setup or producing a scoped overview of the changes needed.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala
Domain
networking, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.