sslkeylog | Log SSL/TLS keys for decrypting SSL | TLS library

 by   segevfiner C Version: 0.5.1 License: MIT

kandi X-RAY | sslkeylog Summary

kandi X-RAY | sslkeylog Summary

sslkeylog is a C library typically used in Security, TLS applications. sslkeylog has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

Log SSL/TLS keys for decrypting SSL/TLS connections made in Python
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              sslkeylog has a low active ecosystem.
              It has 17 star(s) with 5 fork(s). There are 2 watchers for this library.
              There were 1 major release(s) in the last 12 months.
              There are 1 open issues and 4 have been closed. On average issues are closed in 209 days. There are no pull requests.
              It has a neutral sentiment in the developer community.
              The latest version of sslkeylog is 0.5.1

            kandi-Quality Quality

              sslkeylog has 0 bugs and 0 code smells.

            kandi-Security Security

              sslkeylog has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.
              sslkeylog code analysis shows 0 unresolved vulnerabilities.
              There are 0 security hotspots that need review.

            kandi-License License

              sslkeylog is licensed under the MIT License. This license is Permissive.
              Permissive licenses have the least restrictions, and you can use them in most projects.

            kandi-Reuse Reuse

              sslkeylog releases are available to install and integrate.

            Top functions reviewed by kandi - BETA

            kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
            Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of sslkeylog
            Get all kandi verified functions for this library.

            sslkeylog Key Features

            No Key Features are available at this moment for sslkeylog.

            sslkeylog Examples and Code Snippets

            No Code Snippets are available at this moment for sslkeylog.

            Community Discussions

            QUESTION

            Mitmproxy - docker - SSLKEYLOGFILE
            Asked 2020-Feb-06 at 13:45

            I'm using mitmproxy docker container https://hub.docker.com/r/mitmproxy/mitmproxy/

            I'm executing the container using this command:

            ...

            ANSWER

            Answered 2020-Feb-06 at 13:45

            Create your own Dockerfile and run that.

            Source https://stackoverflow.com/questions/57891106

            QUESTION

            Using and decoding raw SSL data as proof
            Asked 2017-Dec-29 at 22:07

            I would like to decode and store raw SSL/TLS data in order to prove something in the future, i think it will be better if i describe it by an example:

            1) There is a remote REST endpoint that is accessible via SSL and provides some useful data. This endpoint is controlled by some third party and i have no control over it.

            2) I issue a GET request to this endpoint and store the raw SSL traffic of the response in one file and then the decoded ssl traffic in another file

            3) Additionally i save the SSL certificate of this endpoint in a separate file (i guess this operation would only need to be done once)

            If i understand correctly when i have all the data from the steps above and in the future, when another third party asks me for a proof that there was certain data on the remote server at some point in the past i could:

            1) Present them with the certificate i saved (step 3). Since this certificate is signed by a well known authority there is almost zero chance that i could forge it

            2) Present them with the RAW SSL data along with a way to decode it using the certificate above

            3) In the decoded REST response headers remote server time should also be present.

            Therefore if i am not mistaken i would be able to prove, with almost no doubt, that at some point in the past there was that certain piece of data on the remote party's server even if the remote server itself is no longer operational.

            Therefore i can use raw SSL data to prove that something existed on the remote server in past. And there is very little chance of someone challeging this claim because forging the response data or headers would mean that i was able to break the SSL encryption.

            Is there a way to automate such scenarios? I mean is there a way to record raw SSL data in a form that would allow it to be easily decoded later?

            I have tried using firefox/chrome browser along with the sslkeylog files and sniffing the traffic using wireshark - it actually works, but is there a way to automate it using some kind of REST library since using firefox and recording SSL keys each time can be troublesome - there may be a need to store thousands of these requests per hour and doing it manually would be a full time job, additionally i am not sure if there is a way to prove that these keys stored in ssskeylog files actually match the certificate of the remote server...

            ...

            ANSWER

            Answered 2017-Dec-29 at 14:24

            No, you cannot prove the server sent the data. For example, with TLS_RSA_WITH_AES_256_CBC_SHA256 as the ciphersuite, you can forge all data from both sides in an entire TLS session without even contacting the server. And the server side can also produce such a forgery. As noted by EJP, the only thing you can't forge is data that is signed. With RSA ciphersuites the only thing signed are the certificates, but they don't change and are not cryptographically bound to a TLS session.

            Other ciphersuites may involve some signed handshake data, but TLS was not designed to provide non-repudiation so I doubt it does by accident.

            Source https://stackoverflow.com/questions/48019706

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            No vulnerabilities reported

            Install sslkeylog

            You can download it from GitHub.

            Support

            For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries
            Install
          • PyPI

            pip install sslkeylog

          • CLONE
          • HTTPS

            https://github.com/segevfiner/sslkeylog.git

          • CLI

            gh repo clone segevfiner/sslkeylog

          • sshUrl

            git@github.com:segevfiner/sslkeylog.git

          • Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link

            Explore Related Topics

            Consider Popular TLS Libraries

            mkcert

            by FiloSottile

            v2rayN

            by 2dust

            acme.sh

            by acmesh-official

            nginxconfig.io

            by digitalocean

            v2ray

            by 233boy

            Try Top Libraries by segevfiner

            keepawake-rs

            by segevfinerRust

            dockerexec

            by segevfinerGo

            axios-light-my-request-adapter

            by segevfinerTypeScript

            pydia2

            by segevfinerPython

            tsup-problem-matcher

            by segevfinerTypeScript