bruno icon indicating copy to clipboard operation
bruno copied to clipboard

Add SSL keylogfile support for advanced network troubleshooting

Open skyhirider opened this issue 10 months ago • 1 comments

Bruno could support SSLKEYLOGFILE so that network monitoring and troubleshooting tools like Wireshark could be used with it.

Use case: I was setting up oauth credentials and the requests were failing. The window in Bruno did not show me the request and response flow as it was inside the authentication tab, so I had no way to properly troubleshoot. I needed to know the exact url that was queried as well as the payload and server response, but it was nowhere to be found.

I figured I could intercept the traffic via Wireshark like I can do with Chrome via the SSLKEYLOGFILE that allows the intercepted traffic to be decrypted locally so that I can inspect what is going wrong.

Nope, Bruno dues not support that even thou it is running Chrome version 106.

Is this something that could be added or enabled? Maybe its just one switch you need to toggle in Electron.

skyhirider avatar Apr 08 '24 20:04 skyhirider

Even i had similar issue with the oauth , were you using client credential ?

It was a small fix that has been merged here !

  • This will be released in the next version .

Also if you wish to examine the calls made by bruno i think something like wireshark is overkill.

You could easily use a proxy and debug your traffic there, i have used this to fix the auth issue above !

PushpenderSaini0 avatar Apr 09 '24 21:04 PushpenderSaini0

For me the issue was that I put in the url with the unique oauth string a the and as well, and Bruno was probably appending it again. Would be an easy fix if I could see what request was sent and which url was used, but there was no way to find it. Resorted to Wireshark in the end, but that did not help as I could not decrypt the message either. Was by dumb luck I tried a shorter url. Wasted time on this, time I could have spend on something else :(

skyhirider avatar Apr 12 '24 18:04 skyhirider

You can use a simple proxy tool like https://httptoolkit.com/ as a proxy to check what calls are being made by bruno.

PushpenderSaini0 avatar Apr 14 '24 13:04 PushpenderSaini0