Debug HTTPS Connections.md

Debug HTTPS Connections

1. Set SSLKEYLOGFILE to a path where private keys will be stored:

   $ export SSLKEYLOGFILE=/some/path/keylog
   $ firefox

2. Capture HTTPS traffic:

   $ sudo tcpdump -s0 -i any -w /some/path/data.pcap

3. Analyze the captured traffic:

   $ tshark                                 \
       -o ssl.keylog_file:/some/path/keylog \
       -r /some/path/data.pcap              \
       -Tjson                               \
       -e http.request.method               \
       -e http.request.full_uri             \
       -e http.file_data                    \
       -e http.response.code                \
       -Y http.request.method==POST