Not able to retrieve TLS mastersecret from BCJSSE 1.78.1

[sanjerai]

I can see BCTLS provides getMasterSecret method under SessionParameters.java .

I am using Spring webclient with Jetty Client and BCJSSE as security provider for TLS1.3 over http2. After handshake is completed i am not able to retrieve mastersecret using BCJSSE. The BCExtendedSSLSession which i get after handshakeSucceeded event does not expose any method to fetch master secret.

Is it possible to have similar implementation as BCTLS in BCJSSE to fetch master secret.

[peterdettman]

At the moment it's not available in BCJSSE because JSSE API provides no access to the master secret. It is a similar issue to getting channel bindings at handshake completion; my comment here mentions some possible ways we could provide the functionality in BCJSSE extensions.