Repository navigation
Not able to retrieve TLS mastersecret from BCJSSE 1.78.1 #1894
Description
I can see BCTLS provides getMasterSecret method under SessionParameters.java .
I am using Spring webclient with Jetty Client and BCJSSE as security provider for TLS1.3 over http2.
After handshake is completed i am not able to retrieve mastersecret using BCJSSE.
The BCExtendedSSLSession which i get after handshakeSucceeded event does not expose any method to fetch master secret.
Is it possible to have similar implementation as BCTLS in BCJSSE to fetch master secret.
Activity
peterdettman commentedon Nov 8, 2024
At the moment it's not available in BCJSSE because JSSE API provides no access to the master secret. It is a similar issue to getting channel bindings at handshake completion; my comment here mentions some possible ways we could provide the functionality in BCJSSE extensions.