Skip to content

add support for SSL key logging - #1555

Open
sudomgamal wants to merge 1 commit into
eclipse-paho:developfrom
sudomgamal:develop_sslkeylogging
Open

add support for SSL key logging#1555
sudomgamal wants to merge 1 commit into
eclipse-paho:developfrom
sudomgamal:develop_sslkeylogging

Conversation

@sudomgamal

Copy link
Copy Markdown
  • SSL keys are generated in the SSL/TLS handshake. they can be used to
    decrypt the packets for analysis by tools like wireshark.
  • add support for the SSLKEYLOGFILE environment variable
  • add support for a custom callback function to handle the keys.
  • the callback can be used to encrypt the SSL key logs for confidentiality.
  • apps can disable the SSLKEYLOGFILE env - for security reasons - by just
    setting the callback.

- SSL keys are generated in the SSL/TLS handshake. they can be used to
  decrypt the packets which is helpful when secure MQTT is used.
- add support for the SSLKEYLOGFILE environment variable
- add support for a custom callback function to handle the keys.
- the callback can be used to encrypt the SSL key logs for confidentiality.
- apps can disable the SSLKEYLOGFILE - for security reasons - by just
  setting the callback.

Signed-off-by: Mohammed Gamal <mg.moh.gamal@gmail.com>
@sudomgamal
sudomgamal changed the base branch from master to develop January 4, 2025 20:36
@sudomgamal
sudomgamal marked this pull request as ready for review January 4, 2025 20:45
@icraggs icraggs added this to the 1.4.0 milestone Feb 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants