google / google/conscrypt

Visibility into TLS events or API to write out key logs

Open
#847 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
1.4k
Forks
326
Avg merge
16h 22m
Merged PRs (30d)
17

Description

I can see the support for printing keys for using Wireshark is hidden behind compile time flags. With recent JDK releases (11+), JSSE is pretty open in logging enough information to debug traffic, at least for TLSv1.2. https://github.com/square/okhttp/pull/6060

It's killed off the awkward days of setting -Djavax.net.debug=ssl,handshake for me...

Specifically you can either
- Capture events and complete messages "Produced ClientHello handshake message".
- Log data for wireshark to decode, and see messages there.

Is there a good way to hook into similar events or get something similar with Conscrypt?

I'm not concerned if the answer is deliberately no. But thought I'd ask the question.

FWIW I think netty does similar for both JSSE or tcnative https://github.com/netty/netty/pull/8653/files

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.