Skip to content

Commit 89a9f49

Browse files
committed
Add suport for TLS key logging
DNSCrypt/dnscrypt-proxy@0c26d16
1 parent e97c047 commit 89a9f49

1 file changed

Lines changed: 8 additions & 0 deletions

File tree

config/dnscrypt-proxy.toml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -223,6 +223,14 @@ dnscrypt_ephemeral_keys = true
223223
# tls_cipher_suite = [52392, 49199]
224224

225225

226+
## Log TLS key material to a file, for debugging purposes only.
227+
## This file will contain the TLS master key, which can be used to decrypt
228+
## all TLS traffic to/from DoH servers.
229+
## Never ever enable except for debugging purposes with a tool such as mitmproxy.
230+
231+
# tls_key_log_file = '/tmp/keylog.txt'
232+
233+
226234
## Bootstrap resolvers
227235
##
228236
## These are normal, non-encrypted DNS resolvers, that will be only used

0 commit comments

Comments
 (0)