mod_key_log

Introduction

mod_key_log writes tls key logs in NSS key log format so that external programs(eg. wireshark) can decrypt TLS connections for trouble shooting.

For more information about NSS key log format, see: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format

Module Configuration

Description

conf/mod_key_log/mod_key_log.conf

Config Item	Description
Log.LogFile	String Set file path of log for saving to a single file without rotation
Log.LogPrefix	String Filename prefix for log
Log.LogDir	String Directory of log files
Log.RotateWhen	String Interval to rotate log file
Log.BackupCount	Integer Max number of rotated log files

Example

Save log to a directory

[Log]
# filename prefix for log 
LogPrefix = key

# log directory 
LogDir = ../log

# interval to rotate logs: M/H/D
# - M: minute
# - H: hour
# - D: day
RotateWhen = H 

# max number of rotated log files
BackupCount = 3

Output log to stdout

[Log]
# filename prefix for log 
LogFile = /dev/stdout