Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4349] Add support for TLS key logs

Date: Wed, 23 Dec 2009 12:30:58 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4349

--- Comment #6 from Adam Langley <agl@xxxxxxxxxxxx> 2009-12-23 12:30:56 PST ---
> I would prefer base64 encoded keys, indexed by (or commented by) the 
> SSLid of the particular SSL session. This makes it easier to edit
> the keyfile manually before sending it to a third party.

That's a reasonable need. base64 is probably a bit too much (I have the NSS
code in mind here and there's no base64 encoder to hand there), but I can hex
encode it.

Keying by the session ID is probably a bad idea because session IDs are
(hopefully) on the way out as code starts using session tickets.

So how about a file of lines like:

01020b0c04050607 0102030405060708090a0b0c....

(where the first column is the prefix of the encrypted PMS and the second is
the PMS)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.