Re: git:master:79f6439f: tls: added support for tls keys log

Sergei Safarov via sr-dev <[email protected]>
Newsgroups gmane.comp.voip.openser.devel,gmane.comp.voip.ser
Message-ID <[email protected]>
I think exist is more elegant way to export
encyptions keys to the file

Need to start Kamailio with defined SSLKEYLOGFIL=/path/here/to/file
environment variable

This I have tested for TLS 1.2 and TLS 1.3. All works perfectly

More details you can find at
https://www.youtube.com/watch?v=Cq6yj9se9M4&t=1850s

Probable this change do not required because allow secret keys to logs.


On Thu, 2025-07-24 at 12:42 +0200, Daniel-Constantin Mierla via sr-dev
wrote:
> Module: kamailio
> Branch: master
> Commit: 79f6439f16f6b715858414689c7c04cf22164ace
> URL:
> https://github.com/kamailio/kamailio/commit/79f6439f16f6b715858414689c7c04cf22164ace
> 
> Author: Daniel-Constantin Mierla <[email protected]>
> Committer: Daniel-Constantin Mierla <[email protected]>
> Date: 2025-07-24T12:28:13+02:00
> 
> tls: added support for tls keys log
> 
> - they can be printed to syslog (NOTICE level) or file
> 
> ---
> 
> Modified: src/modules/tls/tls_domain.c
> Modified: src/modules/tls/tls_mod.c
> Modified: src/modules/tls/tls_util.c
> Modified: src/modules/tls/tls_util.h
> 
> ---
> 
> Diff: 
> https://github.com/kamailio/kamailio/commit/79f6439f16f6b715858414689c7c04cf22164ace.diff
> Patch:
> https://github.com/kamailio/kamailio/commit/79f6439f16f6b715858414689c7c04cf22164ace.patch
> 
> _______________________________________________
> Kamailio - Development Mailing List -- [email protected]
> To unsubscribe send an email to [email protected]
> Important: keep the mailing list in the recipients, do not reply only
> to the sender!
_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.