Introduction

ModuleKeyLog以NSS key log格式记录TLS会话密钥, 便于基于第三方工具(例如wireshark) 解密分析TLS加密流量,方便问题诊断分析

关于NSS key log详细格式说明,参见:https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format

Configuration

  • Module config file

    conf/mod_key_log/mod_key_log.conf

    1. [Log]
    2. # filename prefix for log
    3. LogPrefix = key
    4. # log directory
    5. LogDir = ./log
    6. # interval to rotate logs: M/H/D
    7. # - M: minute
    8. # - H: hour
    9. # - D: day
    10. RotateWhen = H
    11. # max number of rotated log files
    12. BackupCount = 3