caddy
caddy copied to clipboard
Add SSL key logging.
Solves #4668.
@francislavoie Would you mind helping me with adding how to properly parse the config?
@Manouchehri I've pushed my version of this patch, based on your initial PR. After thinking about it some more I decided to leave things pretty simple: you specify a file name in the config and it writes it to a file. We can't control the format of the writing and other tools like Wireshark expect to read from a file, so we'll just do that. I also added a loud warning to the logs to indicate that TLS security is compromised when this feature is used.
Also rebased with master and marked this as experimental so we can change it later, after some field use. (Hopefully not in production.)
Caddyfile usage:
example.com
tls {
insecure_secrets_log keys.log
}
That will log the TLS secrets for connections to example.com.
Does this change work for you? (Please try it out!)
This looks good to me, thanks!