Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2019-12-15 13:30:15 +0000

SYN-bit gravatar image

The command grep -f <(tshark -r Capture01.pcapng -Y tls.handshake.type==1 -T fields -e tls.handshake.random) tlskeys.log does not show any output. This means none of the client_random values from the ClientHello are present in the key-log file.

In other words, your TLS session key collection did not work properly.

  • Did you start Chrome/Firefox from a CMD window that has the SSLKEYLOGFILE environment variable set?
  • Does the "WebRCT-App" use its own TLS library that does not look at the SSLKEYLOGFILE environment variable?