Where is SSLKEYLOGFILE defined?
As discussed above, SSLKEYLOGFILE can be used with some program to capture the key log.
But Java programs using TLS do not respect this environment variable. What is the correct way to let such a Java program dump the key log? (I think Java program most likely uses the following package for TLS. But I am not completely sure.)
As suggested by this wireshark topic, there exists a Java agent that can provide the same functionality: https://github.com/neykov/extract-tls-secrets.
I tested it by providing the agent in the command line and it works for my use-case (TLS v1.3)
All versions of Apache HttpClient use the standard JSSE framework for their TLS transport security. Please refer to the JSSE documentation for details on SSL/TLS debug logging (per @VGR original suggestion)
https://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html
