diff --git a/interop/client/main.go b/interop/client/main.go
index c8c81d0dc..b7858ea97 100644
--- a/interop/client/main.go
+++ b/interop/client/main.go
@@ -30,12 +30,16 @@ func main() {
 	defer logFile.Close()
 	log.SetOutput(logFile)
 
-	keyLog, err := os.Create("/logs/keylogfile.txt")
-	if err != nil {
-		fmt.Printf("Could not create key log file: %s\n", err.Error())
-		os.Exit(1)
+	var keyLog io.Writer
+	if filename := os.Getenv("SSLKEYLOGFILE"); len(filename) > 0 {
+		f, err := os.Create(filename)
+		if err != nil {
+			fmt.Printf("Could not create key log file: %s\n", err.Error())
+			os.Exit(1)
+		}
+		defer f.Close()
+		keyLog = f
 	}
-	defer keyLog.Close()
 
 	tlsConf = &tls.Config{
 		InsecureSkipVerify: true,
diff --git a/interop/server/main.go b/interop/server/main.go
index 791cb5754..c31866765 100644
--- a/interop/server/main.go
+++ b/interop/server/main.go
@@ -3,6 +3,7 @@ package main
 import (
 	"crypto/tls"
 	"fmt"
+	"io"
 	"log"
 	"net"
 	"net/http"
@@ -25,12 +26,16 @@ func main() {
 	defer logFile.Close()
 	log.SetOutput(logFile)
 
-	keyLog, err := os.Create("/logs/keylogfile.txt")
-	if err != nil {
-		fmt.Printf("Could not create key log file: %s\n", err.Error())
-		os.Exit(1)
+	var keyLog io.Writer
+	if filename := os.Getenv("SSLKEYLOGFILE"); len(filename) > 0 {
+		f, err := os.Create(filename)
+		if err != nil {
+			fmt.Printf("Could not create key log file: %s\n", err.Error())
+			os.Exit(1)
+		}
+		defer f.Close()
+		keyLog = f
 	}
-	defer keyLog.Close()
 
 	testcase := os.Getenv("TESTCASE")