0

how to decrypt tlsv1.2 trafic from wireshark capture file in wireshark

asked 2022-02-25 22:34:14 +0000

ilqar200
1 ●1 ●1 ●1

Hello. I want to decrypt some tlsv1.2 trafic in wireshark. This trafic was captured from NetworkMiner and saved as wireshark capture file. These trafic belongs to some mobile app. I used bluestacks on windows to capture this mobile app trafic. Now i want to decrypt tlsv1.2 trafic from saved wireshark capture file. NetworkMiner also saved certificate files (.cer files). How to decrypt this tlsv1.2 trafic in this situation ? thanks.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted

0

answered 2022-02-25 23:54:18 +0000

flag of United Kingdom of Great Britain and Northern Ireland

23790 ●4 ●950 ●227 https://www.wireshark.org

It's likely that you won't be able to decrypt the traffic as you don't have toe correct keying material. The certificate files probably don't have the private keys and would only be usable if the traffic was encrypted using certain ciphers.

More information on decrypting traffic and how to obtain the keying material can be found on the Wiki page for TLS.

edit flag offensive delete link

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Question Tools

1 follower

Stats

Asked: 2022-02-25 22:34:14 +0000

Seen: 350 times

Last updated: Feb 25 '22

Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.

Powered by Askbot version 0.10.2