Exporting TLS secrets

[francoismichel]

Hello,

There does not seem to be a functionnality to easily get a tls keylog file such as it is the case for other QUIC implementations. Fizz provides an example of client using callbacks to get the secrets. It would be interesting to allow a mvfst client to get the same functionalities from the the mvfst API exposed to the client. Some callback could be called in the ActionMoveVisitor of the FizzClientHandshake for example.

Maybe this functionnality already exists (though I did not find a mention of it in the code), if that is the case, sorry for the useless issue.

[cmlMarlon]

I met the same problem in my project. Hope some kindful guys can help out.

[ElNiak]

So we are

[francoismichel]

I have a version with a dirty patch that allows us to export the secrets from mvfst, available here if needed (running QUIC draft 29 but it should be easily updatable to more recent versions):

https://github.com/francoismichel/quic-implems-dockers