Bug #80709 Add NSS Key Logging support to client (and server?)

• Submitted: 12 Mar 2016 9:27
• Modified: 29 Aug 2023 19:42
• Reporter: Daniël van Eeden (OCA)
• Status: Open
• Category: MySQL Server: Command-line Clients
• Severity: S4 (Feature request)
• Version: 5.7.11, 8.0, 8.1
• OS: Any
• CPU Architecture: Any
• Tags: key, logging, nss, openssl, SSL, tls

[12 Mar 2016 9:27] Daniël van Eeden

Description:
Please add support to log (EC)DH master/session keys in NSS Key Log Format.

This helps with:
- troubleshooting/debugging SSL/TLS issues
- dump traffic which can be used to warmup slaves or to do prefetching
- Use a network based audit tool

https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format
https://www.openssl.org/docs/manmaster/apps/sess_id.html
https://wiki.wireshark.org/SSL#Using_the_.28Pre.29-Master-Secret

How to repeat:
See description

[2 Jun 2023 13:29] Daniël van Eeden

Update versions

[29 Aug 2023 19:42] Daniël van Eeden

Maybe support for SSLKEYLOGFILE as environment variable can be added via SSL_CTX_set_keylog_callback()

https://www.openssl.org/docs/man3.1/man3/SSL_CTX_get_keylog_callback.html