Ask Your Question
0

Decryted SSL tab not visible/not appearing

asked 2018-03-24 19:37:45 +0000

xinxolHH gravatar image

updated 2018-03-28 13:37:44 +0000

Hello All,

I am testing the SSL/TLS connections, and I am storing my SSL key log file under the SSL preferences "(Pre)-Master- Secret log filename" (under Preferences--> Protocol-->SSL), in order to decrytp traffic. I saved the enviromental variable(SSLKEYLOGFILE) on a folder, and I have checked the file, and it is updated regurlarly when I am browinsing the internet.

I am connecting via a Proxy to external websites, I am seeing the HTTPS destitantion address,..etc. but I am missing the Decrypted SSL key tab, as for example seen in this blog Old Blog Showing the Decryted tab

I wonder if there is no "SSL Descryted Data" tab on this version or I am missing something in my setup. I do see the "Reassembled TCP" tab. I also have qutie a few "Ignored Unknow recored" and my TCP prefrences has marked the "Allow subdisector to resasemble TCP streams"

I am using Wireshark version 2.4.4, under a Windows 7 machine.

20180328_ Edit: I have realized there is no initial SSL handshake captured in the trace (28th March)

Best Regards

edit retag flag offensive close merge delete

Comments

Prerequisite:

  1. Set the System Environment Properties Variables (SSLKEYLOGFILE) in Windows 7
  2. Wireshark Edit> Preferences> Protocols> SSL. Under (Pre)-Master-Secret log filename. Browse: to the location of the Variable(SSLKEYLOGFILE) and create filename*.log

Wireshark capture of a HTTPS website.

  1. Find the first TCP Syn
  2. Right Click and Select Follow > "TCP Stream" or press [Ctrl+Alt+Shift+T]
mark2018 gravatar imagemark2018 ( 2018-06-12 20:11:18 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-03-28 13:36:03 +0000

xinxolHH gravatar image

Could it be the reason, there is no initial TLS handshake in the trace captured to make enable Wireshark to decrypt the SSL ?

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-03-24 19:37:45 +0000

Seen: 8,967 times

Last updated: Jun 12 '18