diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2019-08-24 19:11:25 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2019-08-25 23:29:46 +0200 |
| commit | aae22fdbd51cf344fe30d7c53fe98238545a53aa (patch) | |
| tree | f6ba3878bcbf5d4f137f0f95a2144deeb3791c47 /lib/vquic/ngtcp2.c | |
| parent | 30a606e06691979ee2822f8e2a48ee627bdffffb (diff) | |
| download | curl-aae22fdbd51cf344fe30d7c53fe98238545a53aa.tar.gz | |
ngtcp2: add support for SSLKEYLOGFILE
Closes #4260
Diffstat (limited to 'lib/vquic/ngtcp2.c')
| -rw-r--r-- | lib/vquic/ngtcp2.c | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/lib/vquic/ngtcp2.c b/lib/vquic/ngtcp2.c index e3af71e94..6abbfa2ab 100644 --- a/lib/vquic/ngtcp2.c +++ b/lib/vquic/ngtcp2.c @@ -285,9 +285,19 @@ static int transport_params_parse_cb(SSL *ssl, unsigned int ext_type, return 1; } +static FILE *keylog_file; /* not thread-safe */ +static void keylog_callback(const SSL *ssl, const char *line) +{ + (void)ssl; + fputs(line, keylog_file); + fputc('\n', keylog_file); + fflush(keylog_file); +} + static SSL_CTX *quic_ssl_ctx(struct Curl_easy *data) { SSL_CTX *ssl_ctx = SSL_CTX_new(TLS_method()); + const char *keylog_filename; SSL_CTX_set_min_proto_version(ssl_ctx, TLS1_3_VERSION); SSL_CTX_set_max_proto_version(ssl_ctx, TLS1_3_VERSION); @@ -323,6 +333,14 @@ static SSL_CTX *quic_ssl_ctx(struct Curl_easy *data) return NULL; } + keylog_filename = getenv("SSLKEYLOGFILE"); + if(keylog_filename) { + keylog_file = fopen(keylog_filename, "wb"); + if(keylog_file) { + SSL_CTX_set_keylog_callback(ssl_ctx, keylog_callback); + } + } + return ssl_ctx; } |