You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
I would like to debug QUIC packet captures using Wireshark when using a client based on NanoSDK, but I need a keylogfile to do that.
Describe the solution you'd like
When a build option is enabled (off by default), then when the environment variable SSLKEYLOGFILE is set to a valid path, write the msquic tls secrets to that file, using msquic interop as an example.
Describe alternatives you've considered
Provide a NanoSDK API for retrieving the secrets struct which can then be written to file (less ideal I think).
Additional context
I have already gotten a prototype version of this to work, and can PR something based on that. But it may not be the right way to do it. What I did discover is that the setup for TLS secrets logging has to go in the middle of the quic_connect_ipv4 function, since it has to happen after the connection is opened but before it is started.
The text was updated successfully, but these errors were encountered:
Hello, @Aposhian
Sorry to bother you, but I'm trying to do just that, get the connection secret and open it in Wireshark. I'm using MQTT over QUIC, that is, I'm connecting to a bocker, all of this with docker containers, what I've been trying to do is the following:
export SSLKEYLOGFILE=/tmp/SSLKEYLOGFILE.log
but without results you capture nothing. Now I'm running out of ideas on how to capture.
@bruno-silva-dtx are you using the version on my fork that I linked to? The upstream version of NanoSDK and/or msquic does not read the SSLKEYLOGFILE environment variable, but my fork does, but it does so a sort of hacky way and you will need to edit the tls config to point to your own certs.
Is your feature request related to a problem? Please describe.
I would like to debug QUIC packet captures using Wireshark when using a client based on NanoSDK, but I need a keylogfile to do that.
Describe the solution you'd like
When a build option is enabled (off by default), then when the environment variable
SSLKEYLOGFILE
is set to a valid path, write the msquic tls secrets to that file, using msquic interop as an example.Describe alternatives you've considered
Provide a NanoSDK API for retrieving the secrets struct which can then be written to file (less ideal I think).
Additional context
I have already gotten a prototype version of this to work, and can PR something based on that. But it may not be the right way to do it. What I did discover is that the setup for TLS secrets logging has to go in the middle of the
quic_connect_ipv4
function, since it has to happen after the connection is opened but before it is started.The text was updated successfully, but these errors were encountered: