Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for SSLKEYLOGFILE #855

Merged
merged 2 commits into from
Jul 8, 2024
Merged

Add support for SSLKEYLOGFILE #855

merged 2 commits into from
Jul 8, 2024

Conversation

mmatczuk
Copy link
Contributor

@mmatczuk mmatczuk commented Jul 5, 2024

No description provided.

I tested manually that it works, steps

1. Run httpbin on localhost 8443

   go run ./cmd/forwarder/ test httpbin --protocol https --address 127.0.0.1:8443 --api-address

2. Run proxy with MITM

   SSLKEYLOGFILE=/tmp/keys go run ./cmd/forwarder/ run --mitm --insecure --proxy-localhost allow

3. Run tshark

   tshark -i lo0 -f "tcp port 8443" -Y "http" -o "tls.keylog_file:/tmp/keys"

4. Run curl

   curl -k -v -x localhost:3128 https://localhost:8443/status/200

tshark should report HTTP payload

Capturing on 'Loopback: lo0'
   13   0.005530    127.0.0.1 → 127.0.0.1    HTTP 363 GET /status/200 HTTP/1.1
   15   0.006096    127.0.0.1 → 127.0.0.1    HTTP 153 HTTP/1.1 200 OK

Fixes #579
@mmatczuk mmatczuk merged commit bd6a2d0 into main Jul 8, 2024
6 checks passed
@mmatczuk mmatczuk deleted the mmt/sslkeylogfile branch July 8, 2024 09:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants