Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-24 Thread Jamil Nimeh
On Fri, 19 Mar 2021 14:46:38 GMT, Greg Rubin wrote: >> I am also not comfortable adding this feature to the JDK, especially since >> every build of the JDK would by default have this feature enabled. Logging >> sensitive information to log files is not good security practice (there are >>

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-23 Thread Bernd Eckenfels
for the NSS Key Log Format for SSL/TLS keys Hi all, I very much appreciate @SalusaSecondus' idea for providing a key logger. For, when working with networks, it's quite natural to analyze message flow with help of wireshark. In TLS 1.3 this isn't possible without a key log because most parts

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-23 Thread raell
@SalusaSecondus' proposal in some way because a key logger would be really helpful for doing networking with Java. Regards, Ralph       Gesendet: Freitag, 19. März 2021 um 13:48 Uhr Von: "Sean Mullan" An: security-dev@openjdk.java.net Betreff: Re: RFR: 8262880: Add support for t

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-19 Thread SalusaSecondus
On Fri, 19 Mar 2021 12:45:43 GMT, Sean Mullan wrote: >> @XueleiFan I'd really like to move this forward but I'm uncertain what >> changes you want me to make. This extra debugging information will be very >> valuable to those of us debugging Java TLS connections. > > I am also not comfortable

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-19 Thread Sean Mullan
On Thu, 18 Mar 2021 21:26:28 GMT, SalusaSecondus wrote: >> It is not good practice to leave secret information in debug log. Also, it >> may be not a good practice to introduce new logger format, including file >> and NSS format, into the SSLLogger. Someone also may want to introduce log >>

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-18 Thread SalusaSecondus
On Thu, 11 Mar 2021 16:33:10 GMT, Xue-Lei Andrew Fan wrote: >> This is my implementation for >> [JDK-8262880](https://bugs.openjdk.java.net/browse/JDK-8262880) and enables >> creating of an SSL/TLS key log in the standardized [NSS Key Log >>

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-11 Thread SalusaSecondus
On Thu, 11 Mar 2021 18:33:07 GMT, Volker Simonis wrote: >> It is not good practice to leave secret information in debug log. Also, it >> may be not a good practice to introduce new logger format, including file >> and NSS format, into the SSLLogger. Someone also may want to introduce log >>

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-11 Thread Volker Simonis
On Thu, 11 Mar 2021 16:33:10 GMT, Xue-Lei Andrew Fan wrote: >> This is my implementation for >> [JDK-8262880](https://bugs.openjdk.java.net/browse/JDK-8262880) and enables >> creating of an SSL/TLS key log in the standardized [NSS Key Log >>

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-11 Thread Xue-Lei Andrew Fan
On Tue, 9 Mar 2021 17:18:39 GMT, SalusaSecondus wrote: > This is my implementation for > [JDK-8262880](https://bugs.openjdk.java.net/browse/JDK-8262880) and enables > creating of an SSL/TLS key log in the standardized [NSS Key Log >

RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-11 Thread SalusaSecondus
This is my implementation for [JDK-8262880](https://bugs.openjdk.java.net/browse/JDK-8262880) and enables creating of an SSL/TLS key log in the standardized [NSS Key Log Format](https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format). This is supported by many TLS

Re: RFR: 8262880: Add support for the NSS Key Log Format for SSL/TLS keys

2021-03-11 Thread Volker Simonis
On Tue, 9 Mar 2021 17:18:39 GMT, SalusaSecondus wrote: > This is my implementation for > [JDK-8262880](https://bugs.openjdk.java.net/browse/JDK-8262880) and enables > creating of an SSL/TLS key log in the standardized [NSS Key Log >