[openssl-dev] [openssl.org #4201] Feature Request: Support dumping session keys in NSS key log format

[Jan Žák via RT]

It automatically opens a BIO for the keylogfile. Also if this patch is
merged, RT 3352 can be reverted because it covers only a special case in
the s_client app.

On Tue, Jan 19, 2016 at 8:33 PM, Jan Žák <rt at openssl.org> wrote:

> I have updated Judson's patch to match with master branch. See GitHub PR
> https://github.com/openssl/openssl/pull/570
>
> Jan
>
> On Mon, Jan 11, 2016 at 12:34 PM, Judson Wilson via RT <rt at openssl.org>
> wrote:
>
> > Here is an OpenSSL port of a patch in BoringSSL. It requires a call from
> > the application to set a file BIO.  You could probably do this from
> within
> > SSL_CTX_new or something like that if you want a solution that doesn't
> > change the application.
> >
> >
> >
> https://github.com/JudsonWilson/openssl/commit/20e035a293756976b519ce028d5bcfe95544794b
> >
> >
> >
> > On Mon, Jan 11, 2016 at 2:08 AM, Matt Caswell via RT <rt at openssl.org>
> > wrote:
> >
> > > On Mon Dec 28 23:53:02 2015, matt wrote:
> > > > On Mon Dec 28 22:01:04 2015, rsalz at akamai.com wrote:
> > > > > Yes we would be interested in this but someone would almost
> > > > > definitely
> > > > > have to be provided as a complete patch because it seems unlikely
> > > > > anyone on the team will get around to doing it by 1.1 release.
> > > > >
> > > >
> > > > Actually I think this capability is already in 1.1.0...or rather it
> > > > *was* but
> > > > now seems to be broken.
> > > >
> > > > See commit 189ae368d91 and RT ticket 3352.
> > > >
> > > > I suspect the big apps cleanup broke it.
> > >
> > > This is now fixed. Keeping this ticket open for now because of the
> > request
> > > for
> > > support beyond just the apps.
> > >
> > > Matt
> > >
> > > _______________________________________________
> > > openssl-dev mailing list
> > > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
> > >
> >
> > _______________________________________________
> > openssl-dev mailing list
> > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
> >
>
> _______________________________________________
> openssl-dev mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
>