This is an implementation of the SSLKEYLOGFILE facility, available in Firefox and Chromium/Google Chrome, that is supported by Wireshark in order to decrypt SSL/TLS connections even when you don’t have the private key, or when using key exchange methods that will prevent decryption even if you do (Such as Diffie-Hellman).
This is for the standard library ssl module, it won’t work for other ssl modules.
- Note:
Python 3.8+ includes built-in support for generating an SSL key log file via ssl.SSLContext.keylog_filename, and will also enable it when the SSLKEYLOGFILE environment variable is set when creating a context via ssl.create_default_context.
This package uses the same callback the built-in implementation is using, which will likely cause both implementations to trample each other, causing the other not to work, or other unintended consequences. As such, you should probably not enable both at the same time.
Quick Start
import os
import sslkeylog
sslkeylog.set_keylog(os.environ.get('SSLKEYLOGFILE')) # Or directly specify a path
# Do anything involving SSL (Using the built-in ssl module)Set the SSLKEYLOGFILE environment variable if you use it, and set “(Pre)-Master-Secret log filename” in Wireshark’s SSL protocol preferences to the resulting file.
Links
License
MIT License, except OpenSSL which is licensed under it’s own license. See LICENSE.txt
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
File details
Details for the file sslkeylog-0.5.3.tar.gz.
File metadata
- Download URL: sslkeylog-0.5.3.tar.gz
- Upload date:
- Size: 5.6 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3a9e52534f56ebeadff0e9ad7e2dfa39d946869e680d71f5aab48accd9d72712
|
|
| MD5 |
8b41a7b647e81fb3a450516f8a447933
|
|
| BLAKE2b-256 |
a47bd5846e7c38e07342c83be5ac7e5cd574ba6a2e461f53830b407a254456b3
|
Provenance
The following attestation bundles were made for sslkeylog-0.5.3.tar.gz:
Publisher:
publish.yml on segevfiner/sslkeylog
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sslkeylog-0.5.3.tar.gz -
Subject digest:
3a9e52534f56ebeadff0e9ad7e2dfa39d946869e680d71f5aab48accd9d72712 - Sigstore transparency entry: 2549188360
- Sigstore integration time:
-
Permalink:
segevfiner/sslkeylog@ad70870506caa8bb71e5971665fc2e4f44a8df2b -
Branch / Tag:
refs/tags/v0.5.3 - Owner: https://github.com/segevfiner
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@ad70870506caa8bb71e5971665fc2e4f44a8df2b -
Trigger Event:
push
-
Statement type:
