[sr-dev] [kamailio/kamailio] tls: allow export session keys (#2785)

sergey-safarov notifications at github.com
Mon Jun 28 06:10:05 CEST 2021


To get working session keys embedding and description required to record TLS connection from start (TCP SYN/ACK).
If TLS connection is long-term and the start of the connection not recorded, then traffic cannot be decrypted.

>From my point view, need to try utilize `SSL_key_update()` with `SSL_KEY_UPDATE_REQUESTED`. [More info](https://www.openssl.org/docs/man1.1.1/man3/SSL_renegotiate.html).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/2785#issuecomment-869337683
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20210627/efc464c7/attachment.htm>


More information about the sr-dev mailing list