Re: gnutls_session_get_master_secret

On Thu, Apr 18, 2019 at 10:27 AM Jeremy Harris <[email protected]> wrote:
>
> On 18/04/2019 07:19, Nikos Mavrogiannopoulos wrote:
> >>> Use the SSLKEYLOGFILE environment variable. It will create the
> >>> necessary keys in the file
> >>
> >> Except for setuid programs?  There seems to be some form of explicit
> >> lockout in secure_getenv().
> >
> > Yes, that's intentional, so that a user will not overwrite root-owned files.
>
> So how can the keying be retrieved from such a program?

If you have access to the program you can make it set the environment
variable itself, otherwise, you have to run it as root.

regards,
Nikos