sslkeylog 0.1.0

Log SSL/TLS keys for decrypting SSL/TLS connections

This is an implementation of the SSLKEYLOGFILE facility, available in Firefox and Chromium/Google Chrome, that is supported by Wireshark in order to decrypt SSL/TLS connections even when you don’t have the private key, or when using key exchange methods that will prevent decryption even if you do (Such as Diffie-Hellman).

This is for the standard library ssl module, it won’t work for other ssl modules.

Quick Start

import sslkeylog

sslkeylog.set_keylog("sslkeylog.txt")

# Do anything involving SSL (Using the built-in ssl module)

And set “(Pre)-Master-Secret log filename” in Wireshark’s SSL protocol preferences to the resulting file.

Links

• NSS Key Log Format

• Wireshark - SSL

License

MIT License, except OpenSSL which is licensed under it’s own license. See LICENSE.txt

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)