Package org.bouncycastle.tls.keylog

package org.bouncycastle.tls.keylog

Reporting of TLS connection secrets in the terms of RFC 9850, the SSLKEYLOGFILE format, so that a capture of a test connection can be decrypted by an analyser such as Wireshark.

This package exists only in the bctls-klog build of the Bouncy Castle TLS API and consists of a sink, TlsKeyLog, which the application implements and names in its java.security file, plus the RFC's labels in TlsKeyLogLabel. Storage, encoding and access control are the implementation's to decide; see TlsKeyLog for the contract and for why RFC 9850 sec. 1.1 forbids any of this in production.

Related Packages

Package	Description
org.bouncycastle.tls	A low-level TLS/DTLS API.
org.bouncycastle.tls.crypto	Definitions for the cryptography service layer supporting the APIs.

Class	Description
TlsKeyLog	A sink for the connection secrets described by RFC 9850, the SSLKEYLOGFILE format.
TlsKeyLogLabel	The RFC 9850 labels a TlsKeyLog can be handed by this implementation.