[New-bugs-announce] [issue34271] Please support logging of SSL master secret by env variable SSLKEYLOGFILe

[Johannes Frank]

New submission from Johannes Frank <jmfrank63 at gmail.com>:

As discussed on the EuroPython 2018 it would be a great improvement if the python SSL module would respect the SSLKEYLOGFILE environment variable to log the master secret and the client random for packet trace decryption.

The pycurl module compiled against libopenssl 1.1.0h does already work.

OpenSSL 1.1.1 will offer to register a callback that will log the keys.

There is also c code available using LD_PRELOAD here:

https://git.lekensteyn.nl/peter/wireshark-notes/tree/src/sslkeylog.c

It would be great if a call to the requests, aiohttp, urllib3 or asks library would lead to the keys logged if the environment variable is set from within python.

Thank you

----------
assignee: christian.heimes
components: SSL
files: pycurl-get.py
messages: 322632
nosy: christian.heimes, jmfrank63
priority: normal
severity: normal
status: open
title: Please support logging of SSL master secret by env variable SSLKEYLOGFILe
type: enhancement
versions: Python 3.7
Added file: https://bugs.python.org/file47719/pycurl-get.py

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue34271>
_______________________________________