Closed Bug 1523840 Opened 6 years ago Closed 6 years ago

SSLKEYLOGFILE env var no longer works v65

Categories

(NSS :: Libraries, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: wallboy, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0

Steps to reproduce:

Just updated to Firefox 65 (64 bit). Windows 7 x64.

Noticed I could no longer decrypt traffic in Wireshark using the SSLKEYLOGFILE env var as this file was no longer being created/written to by Firefox.

Actual results:

SSLKEYLOGFILE stopped logging keys

Expected results:

SSLKEYLOGFILE continues to work

I can confirm that Firefox65 doesn't write the SSLKEYLOGFILE.
This seem to be the expected result if I read bug 1188657 but the reality is different.

tested on windows:
60.4ESR,66b3,67 trunk: logfile created
60.5ESR,65 release: no logfile

It could be that writing was enabled in release builds by an accident but 66b3 still writes that file.

moving to PSM for triage, this is either NSS or Release build configuration or it's just the expected result after the release build config got fixed.

Status: UNCONFIRMED → NEW
Component: Untriaged → Security: PSM
Ever confirmed: true
Product: Firefox → Core

Sorry about this. Bug 1519209 disabled the functionality for 65 and ESR due to a crash issue. It should be re-enabled in beta 66 by Bug 1515236. It's not currently targeted to be fixed on 60 ESR.

Assignee: nobody → nobody
Status: NEW → RESOLVED
Closed: 6 years ago
Component: Security: PSM → Libraries
Product: Core → NSS
QA Contact: jjones
Resolution: --- → WORKSFORME
Version: 65 Branch → other

This was fixed in 66, however it seems it is now disabled again in 67.0. Any reason?

Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---

I am unclear how it worked-then-didn't... It's still disabled for RELEASE_OR_BETA per Bug 1519209 and from inspection of the tree, AFAICT.

Parts of Bug 1515236 were backed out due to ASAN failures, but the crash fix is in NSS 3.44 which is in Beta now. I've filed Bug 1555067 to re-enable for beta and release Firefox. Thanks for the report!

Status: REOPENED → RESOLVED
Closed: 6 years ago6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.