Skip to content

Add support for SSLKEYLOGFILE#855

Merged
mmatczuk merged 2 commits intomainfrom
mmt/sslkeylogfile
Jul 8, 2024
Merged

Add support for SSLKEYLOGFILE#855
mmatczuk merged 2 commits intomainfrom
mmt/sslkeylogfile

Conversation

@mmatczuk
Copy link
Contributor

@mmatczuk mmatczuk commented Jul 5, 2024

No description provided.

@mmatczuk mmatczuk requested a review from Choraden as a code owner July 5, 2024 13:01
@mmatczuk mmatczuk force-pushed the mmt/sslkeylogfile branch from 301bfc3 to 8780080 Compare July 5, 2024 13:12
mmatczuk added 2 commits July 5, 2024 15:56
I tested manually that it works, steps

1. Run httpbin on localhost 8443

   go run ./cmd/forwarder/ test httpbin --protocol https --address 127.0.0.1:8443 --api-address

2. Run proxy with MITM

   SSLKEYLOGFILE=/tmp/keys go run ./cmd/forwarder/ run --mitm --insecure --proxy-localhost allow

3. Run tshark

   tshark -i lo0 -f "tcp port 8443" -Y "http" -o "tls.keylog_file:/tmp/keys"

4. Run curl

   curl -k -v -x localhost:3128 https://localhost:8443/status/200

tshark should report HTTP payload

Capturing on 'Loopback: lo0'
   13   0.005530    127.0.0.1 → 127.0.0.1    HTTP 363 GET /status/200 HTTP/1.1
   15   0.006096    127.0.0.1 → 127.0.0.1    HTTP 153 HTTP/1.1 200 OK

Fixes #579
@mmatczuk mmatczuk force-pushed the mmt/sslkeylogfile branch from 8780080 to cc2093a Compare July 5, 2024 13:57
@mmatczuk mmatczuk merged commit bd6a2d0 into main Jul 8, 2024
@mmatczuk mmatczuk deleted the mmt/sslkeylogfile branch July 8, 2024 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants