Xxsslkey.log location with helm deployment

Q/A
#1

Hello,

I deployed my kubernetes network following helm installation : free5GC Helm Installation - free5GC
Every pod works fine but I can’t find NF keys (xxsslkey.log) that allow decryption of tls packets. When deploying with the conventional method I found the NF keys in /free5gc/log/20240920_154846/key/ but I can’t find this folder with my kubernetes setup.
Do someone know where this files are ?

As a side note I tried to disable TLS by editing free5gc-helm/charts/free5gc/values.yaml but the sbi scheme was already set to http so my packets shouldn’t be encrypted. Yet when I analyse my pcap in wireshark they are encrypted.

EDIT : Im also searching for a way to reproduce the test.sh script when with the kubernetes deployment

Have a nice day,

Adding custom fields to http_wrapper for tracing purposes
#2

Hi, @HeineKayn

Based on this issue, If you want to find the xxsslkey.log, you should add the -l option when starting the NF. This means modifying the <NF>-deployment.yaml file in each subchart.
For example, if you modify the deployment file as shown below, you could find the xxsslkey.log in ./log/key/

  • free5gc/charts/free5gc-amf/templates/amf-deployment.yaml
             {{- end }}
         command: ["./amf"]
-        args: ["-c", "./config/amfcfg.yaml"]
+        args: ["-c", "./config/amfcfg.yaml", "-l", "./log/amf.log"]

Additionally, you may try this method to decode the HTTP2 packets.

Best Regards,