Visibility into TLS events or API to write out key logs
- Dominant language
- Java
- Stars
- 1.4k
- Forks
- 326
- Avg merge
- 16h 22m
- Merged PRs (30d)
- 17
Description
I can see the support for printing keys for using Wireshark is hidden behind compile time flags. With recent JDK releases (11+), JSSE is pretty open in logging enough information to debug traffic, at least for TLSv1.2. https://github.com/square/okhttp/pull/6060
It's killed off the awkward days of setting -Djavax.net.debug=ssl,handshake for me...
Specifically you can either
- Capture events and complete messages "Produced ClientHello handshake message".
- Log data for wireshark to decode, and see messages there.
Is there a good way to hook into similar events or get something similar with Conscrypt?
I'm not concerned if the answer is deliberately no. But thought I'd ask the question.
FWIW I think netty does similar for both JSSE or tcnative https://github.com/netty/netty/pull/8653/files
Contributor guide
Assessment
This issue has not been assessed yet.