From fb0032a33e3c3705f45ea09a1a55ac0b1d4f0fd6 Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 19 Sep 2016 10:29:00 +0200
Subject: [PATCH] TODO: Support SSLKEYLOGFILE

---
 docs/TODO | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/TODO b/docs/TODO
index 40b8cc8ec..6bffdd620 100644
--- a/docs/TODO
+++ b/docs/TODO
@@ -108,6 +108,7 @@
  13.7 improve configure --with-ssl
  13.8 Support DANE
  13.9 Support TLS v1.3
+ 13.10 Support SSLKEYLOGFILE
 
  14. GnuTLS
  14.1 SSL engine stuff
@@ -707,6 +708,15 @@ that doesn't exist on the server, just like --ftp-create-dirs.
  the corresponding support. There may be a need to add some additional options
  to allow libcurl to take advantage of the new features in 1.3.
 
+13.10 Support SSLKEYLOGFILE
+
+ When used, Firefox and Chrome dumps their master TLS keys to the file name
+ this environment variable specifies. This allows tools like for example
+ Wireshark to capture and decipher TLS traffic to/from those clients. libcurl
+ could be made to support this more widely (presumably this already works when
+ built with NSS). Peter Wu made a OpenSSL preload to make possible that can be
+ used as inspiration and guidance
+ https://git.lekensteyn.nl/peter/wireshark-notes/tree/src/sslkeylog.c
 
 14. GnuTLS
 
-- 
2.40.0