From 97d4b67ccaa0d700c23377faf668a47d37e568b5 Mon Sep 17 00:00:00 2001
From: Neil Horman <nhorman@openssl.org>
Date: Mon, 26 Aug 2024 18:33:14 -0400
Subject: [PATCH] Add documentation for SSLKEYLOGFILE
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Hugo Landau <hlandau@devever.net>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25297)
---
 doc/man7/openssl-env.pod | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/doc/man7/openssl-env.pod b/doc/man7/openssl-env.pod
index 2d80ae6e1b6..b10ced0876a 100644
--- a/doc/man7/openssl-env.pod
+++ b/doc/man7/openssl-env.pod
@@ -188,6 +188,14 @@ Specifies a QUIC qlog output directory. See L<openssl-qlog(7)>.
 
 Used to set a QUIC qlog filter specification. See L<openssl-qlog(7)>.
 
+=item B<SSLKEYLOGFILE>
+
+Used to produce the standard format output file for SSL key logging.  Optionally
+set this variable to a filename to log all secrets produced by SSL connections.
+Note, use of the environment variable is predicated on configuring OpenSSL at
+build time with the enable-sslkeylog feature.  The file format standard can be
+found at L<https://datatracker.ietf.org/doc/draft-ietf-tls-keylogfile/>
+
 =back
 
 =head1 COPYRIGHT
-- 
2.47.2