From d742b6caf79d3f38e29d3c68a47d2288435b2cad Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Tue, 7 Jul 2020 10:14:56 +0200 Subject: [PATCH] DOC: fix tune.ssl.keylog sample fetches array The labels EXPORTER_SECRET and EARLY_EXPORTER_SECRET were swapped in the array. --- doc/configuration.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 38fbbd48d..3f37e0d1b 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -2186,8 +2186,8 @@ tune.ssl.keylog { on | off } SERVER_HANDSHAKE_TRAFFIC_SECRET | %[ssl_fc_server_handshake_traffic_secret] CLIENT_TRAFFIC_SECRET_0 | %[ssl_fc_client_traffic_secret_0] SERVER_TRAFFIC_SECRET_0 | %[ssl_fc_server_traffic_secret_0] - EARLY_EXPORTER_SECRET | %[ssl_fc_exporter_secret] - EXPORTER_SECRET | %[ssl_fc_early_exporter_secret] + EXPORTER_SECRET | %[ssl_fc_exporter_secret] + EARLY_EXPORTER_SECRET | %[ssl_fc_early_exporter_secret] This is only available with OpenSSL 1.1.1, and useful with TLS1.3 session.