TLS partially decrypted

asked 2022-01-26 08:54:42 +0000

hjacquemin gravatar image

Hello Guys,

I tried to decrypt TLS but I have a question.

I'm tracking a HTTP stream but I'm unable to decrypt the client/serveur hello part of the stream. The HTTP packets are decrypted (security layer is well present in packet details).

Is it a normal behavior or somekeys are missing from my sshkeylog file ?

I need to decrypt the client/server hello because I received a "redirect" but I need the details of it.

Thanks for your help.

edit retag flag offensive close merge delete

Comments

Hi,

Could you please share the pcap file in question and also the SSLkey file, so I can take a look?

Best Regards, Denzil D'Souza

ddsouza gravatar imageddsouza ( 2022-01-28 12:16:04 +0000 )edit
add a comment