Ask Your Question

Revision history [back]

RSA private key files only work with the RSA key exchange method, but your session uses an ephemeral Diffie-Hellman key exchange (based on elliptic curves):

ssl_set_cipher found CIPHER 0xC02F TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 -> state 0x17

For the background details, see my SharkFest '18 ASIA talk, SSL/TLS Decryption: uncovering secrets:

  • Slides: https://lekensteyn.nl/files/wireshark-ssl-tls-decryption-secrets-sharkfest18asia.pdf
  • Video: https://youtu.be/bwJEBwgoeBg (linked from https://sharkfestasia.wireshark.org/sf18asia)

RSA private key files only work with the RSA key exchange method, but your session uses an ephemeral Diffie-Hellman key exchange (based on elliptic curves):

ssl_set_cipher found CIPHER 0xC02F TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 -> state 0x17

For the background details, see my SharkFest '18 ASIA talk, SSL/TLS Decryption: uncovering secrets:

  • Slides: https://lekensteyn.nl/files/wireshark-ssl-tls-decryption-secrets-sharkfest18asia.pdf
  • Video: https://youtu.be/bwJEBwgoeBg (linked from https://sharkfestasia.wireshark.org/sf18asia)