diff options
| author | Maximilian Hils <git@maximilianhils.com> | 2015-09-06 03:20:58 +0200 |
|---|---|---|
| committer | Maximilian Hils <git@maximilianhils.com> | 2015-09-06 03:20:58 +0200 |
| commit | b4013659a81a48908eb3e060f04143ba1f9689bb (patch) | |
| tree | 1571be3f8cb85f6e593c369a8d3ca50cb87e107b /docs/dev/sslkeylogfile.rst | |
| parent | eb2334c6cb7c9ab9c260bc609ae43fb53d441f6f (diff) | |
| download | mitmproxy-b4013659a81a48908eb3e060f04143ba1f9689bb.tar.gz mitmproxy-b4013659a81a48908eb3e060f04143ba1f9689bb.tar.bz2 mitmproxy-b4013659a81a48908eb3e060f04143ba1f9689bb.zip | |
docs :tada:
Diffstat (limited to 'docs/dev/sslkeylogfile.rst')
| -rw-r--r-- | docs/dev/sslkeylogfile.rst | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/dev/sslkeylogfile.rst b/docs/dev/sslkeylogfile.rst new file mode 100644 index 00000000..d61a10c0 --- /dev/null +++ b/docs/dev/sslkeylogfile.rst @@ -0,0 +1,14 @@ +.. _sslkeylogfile: + +TLS Master Secrets +================== + +The SSL master keys can be logged by mitmproxy so that external programs can decrypt TLS connections +both from and to the proxy. Key logging is enabled by setting the environment variable +:envvar:`SSLKEYLOGFILE` so that it points to a writable text file. +Recent versions of WireShark can use these log files to decrypt packets. +You can specify the key file path in WireShark via +:samp:`Edit -> Preferences -> Protocols -> SSL -> (Pre)-Master-Secret log filename`. + +Note that :envvar:`SSLKEYLOGFILE` is respected by other programs as well, e.g. Firefox and Chrome. +If this creates any issues, you can set :envvar:`MITMPROXY_SSLKEYLOGFILE` alternatively.
\ No newline at end of file |