where is the function "SSL_write_key"

[boost2020]

I've searched through all OpenSSL and BoringSSL projects, but I haven't been able to find the SSL_write_key function. So, I'd like to ask, where is it?

[cfc4n]

There is no function called SSL_write_key. The SSL_write_key in SEC("uprobe/SSL_write_key") is not crucial; the key point lies in the AttachToFuncName function within the eBPF loader. Therefore, you just need to focus on what AttachToFuncName is.

ecapture/user/module/probe_openssl_pcap.go

Lines 140 to 146 in cf1d677

	m.bpfManager.Probes = append(m.bpfManager.Probes, &manager.Probe{
	Section: "uprobe/SSL_write_key",
	EbpfFuncName: "probe_ssl_master_key",
	AttachToFuncName: masterFunc,
	BinaryPath: binaryPath,
	UID: fmt.Sprintf("uprobe_smk_%s", masterFunc),
	})