aboutsummaryrefslogtreecommitdiffstats
path: root/docs/dev/sslkeylogfile.rst
diff options
context:
space:
mode:
authorMaximilian Hils <git@maximilianhils.com>2015-09-16 02:53:01 +0200
committerMaximilian Hils <git@maximilianhils.com>2015-09-16 02:53:01 +0200
commit457025df9a64f312685774cb743eeb52cd37bd3f (patch)
tree98de6633322059ac95ab50e4b2d3129aa6051b58 /docs/dev/sslkeylogfile.rst
parent436a9ea8398e25709f139fde609aa74e8fb3f3f8 (diff)
parentc3f73552b82923e8da224529895332c44bf8dace (diff)
downloadmitmproxy-457025df9a64f312685774cb743eeb52cd37bd3f.tar.gz
mitmproxy-457025df9a64f312685774cb743eeb52cd37bd3f.tar.bz2
mitmproxy-457025df9a64f312685774cb743eeb52cd37bd3f.zip
Merge pull request #751 from mitmproxy/readthedocs
Move Docs to readthedocs
Diffstat (limited to 'docs/dev/sslkeylogfile.rst')
-rw-r--r--docs/dev/sslkeylogfile.rst14
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/dev/sslkeylogfile.rst b/docs/dev/sslkeylogfile.rst
new file mode 100644
index 00000000..04b86cc4
--- /dev/null
+++ b/docs/dev/sslkeylogfile.rst
@@ -0,0 +1,14 @@
+.. _sslkeylogfile:
+
+TLS Master Secrets
+==================
+
+The SSL master keys can be logged by mitmproxy so that external programs can decrypt TLS
+connections both from and to the proxy. Key logging is enabled by setting the environment variable
+:envvar:`SSLKEYLOGFILE` so that it points to a writable text file.
+Recent versions of WireShark can use these log files to decrypt packets.
+You can specify the key file path in WireShark via
+:samp:`Edit -> Preferences -> Protocols -> SSL -> (Pre)-Master-Secret log filename`.
+
+Note that :envvar:`SSLKEYLOGFILE` is respected by other programs as well, e.g. Firefox and Chrome.
+If this creates any issues, you can set :envvar:`MITMPROXY_SSLKEYLOGFILE` alternatively.