Wireshark mailing list archives

Re: Firefox not logging into $SSLKEYLOGFILE


From: Miroslav Rovis <miro.rovis () croatiafidelis hr>
Date: Thu, 31 Oct 2019 14:46:49 +0000

On 191031-09:27-0400, Lee wrote:
On 10/31/19, Miroslav Rovis wrote:
Hi!

Regularly installed, recently:

$ firefox --version
Mozilla Firefox 70.0

On Devuan (just a non-systemd Debian, 99% plus of packages are Debian):

Seems to be on purpose:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842292
  In previous versions of libnss, it was possible to use SSLKEYLOGFILE
environment variable to save session keys to a file. Since version
3.24, this is disabled by default at compile time [1].

Regards,
Lee

Thanks, Lee!

I could've guessed something of such kind was the case.

Thing is, I'm pretty happy with Pale Moon, that has custom TLS-logging, and does it fine, for most of my needs, 
including internet-banking.

However, CPanel, which I'd need for my pages, and I heard that only very recently --not verified-- will not, and it's  
the choice of their programmers, work with anything but the big browsers. Pale Moon is just not supported. Firefox the 
sole option for me.

And I hate it when I don't see what whoever, just name'em, does their rummaging in my machines. They all must open up 
for me, be decryptable. My machines are my turf, not theirs.

Related, the local Croatian registrar (https://domene.hr, for my NGO's domain in the signature below) I also learned 
recently, and learned the hard way, also does not support anything but the big browsers. Shame! (I'm sure it's kind of 
global trend for other countries' registrars.)

So, learn how to get my Firefox --when I need it-- log the keys, or live in the dark on what it lets other subjects do 
in my machines.

This will take time, and I do not have it right now...

Regards!

-- 
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr

Attachment: signature.asc
Description:

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: