serverhello tls from proxy is encrypted

asked 2018-05-25 02:42:54 +0000

derevko gravatar image

I captured traffic from my PC to a website and trying to observe the TLS handshake. It passed through proxy (no TLS termination). The webpage were able to load just fine but from the packet capture, i couldn't find the reply for server hello and instead it shows as "Encrypted Handshake Message".

What could be the reason that i can't see the server hello here? Is there any settings that i need to configure beside the "TCP reassemble" ? http://i67.tinypic.com/156769y.png

edit retag flag offensive close merge delete

Comments

anyone has any idea?

derevko gravatar imagederevko ( 2018-06-06 01:32:36 +0000 )edit

Sorry, no idea with just a picture. Suggest you make the trace available and we could look at it and compare the application bytes to known-good TLS handshakes.

Bob Jones gravatar imageBob Jones ( 2018-06-06 19:45:05 +0000 )edit
add a comment