How can I save the SSL keys for https when I use `urllib2`?

Question

I need to save the SSL keys in a file, in order to decrypt the TCP packet via Wireshark later. What should I do?

#!/usr/bin/env python
# -*- coding: UTF-8 -*-

import urllib2
import json

data={}
data_json = json.dumps(data, encoding='UTF-8', ensure_ascii=False)
requrl = "https://52.31.41.56/test"   # look, the protocol is https
req = urllib2.Request(url=requrl, data=data_json)
req.add_header('Content-Type', 'application/json')
# how can I record the SSL keys in a file, for Wireshark decryption
rsp_fp = urllib2.urlopen(req)
rsp_data = rsp_fp.read()
print(rsp_data)

Answer 1

Use sslkeylogfile

Example Usage

Use sslkeylog, which is compatible with both Python2 and Python3. I'm modifying your code to save the SSL key logs while making a connection to Stack Overflow.

import urllib2
import sslkeylog

# Save SSL keys to "sslkeylog.txt" in this directory
# Note that you only have to do this once while this is in scope
sslkeylog.set_keylog("sslkeylog.txt")
# Make an HTTPS connection to Stack Overflow
requrl = "https://stackoverflow.com" 
req = urllib2.Request(url=requrl)
rsp_fp = urllib2.urlopen(req)

Verification

Then if we check sslkeylog.txt, we can see that there is now an entry:

bash$ cat sslkeylogfile.txt
CLIENT_RANDOM a655a2e200ddc96c1571fe29af1962013ccbab1b9e9b865db112a9c1492c449a 3280c9fbee32df623074f80519f278420971aaa6eb91ab0f1f973d505a03ddbcc4fba2ca83f6d733addebdb0358e606d