3 ms·
To inspect your own traffic you can use SSLKEYLOGFILE and then load it into wireshark.
by the8472 2y ago
To inspect your own traffic you can use SSLKEYLOGFILE and then load it into wireshark.
- tsimionescu 2y agoMost apps don't support SSLKEYLOGFILE. OpenSSL, the most popular TLS library, doesn't support it.
- haradion 2y agoOpenSSL does provide a callback mechanism to allow for key logging, but the application does have to opt in. IIRC, at least Curl does support it by default.
- tsimionescu 2y agoYes, there are ways to do keylogging with OpenSSL. Even if the app doesn't support it, you can do it with LD_PRELOAD and external libraries that call those callbacks. But it's still a whole lot more work than just an env var, and then just not having all these problems in the first place, by avoiding unnecessary encryption. And it probably won't work on mobile.