SSL decode

Question

Hi,

I just downloaded the 1.7.1 source and build it by,

./configure; make

When I run this wireshark and try to setup SSL decode (RSA Key list), I don't find out any such option in preference/protocols/SSL. All I find is the check-boxes and nothing else.

Do I need to build with some extra flags or something?

BTW, I am on Ubuntu 12.04 and want to write a decoder for some custom messages which are sent over SSL.

Thanks in advance, Rajib

Answer 1

0

Please check if GnuTLS is missing on your system. configure will automatically check for it's existence. If it's not available, SSL/TLS decryption will be disabled. Output of configure in this case: "GnuTLS not found, disabling SSL decryption".

Check results
grep -i gnutls config.log

Install libgnutls-dev
apt-get install libgnutls-dev

Regards
Kurt

answered 08 May '12, 23:57

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 09 May '12, 00:17

Hi Kurt,

Thanks for your reply. I installed the gnutls package but it still remains the same. when I configure wireshark as,

./configure --with-ssl

it says that,

configure: error: SSL crypto library was requested, but is not available

Please help.

Regards, Rajib

(09 May '12, 06:02) Rajib Karmakar

(I converted your "answer" to a "comment", please see the FAQ for details on how to use this site best)

As per the error message, you tell configure to use the SSL libraries, but they are not found on your system. You need to install the GnuTLS (dev) libraries with apt-get. Have a look at the development guide for more details on how to setup up a proper environment to build wireshark yourself.

(09 May '12, 06:10) SYN-bit ♦♦

Just run this command

apt-get install libgnutls-dev

and then re-run configure.

(09 May '12, 06:51) Kurt Knochner ♦

1

apt-get build-dep wireshark should also work.

(09 May '12, 08:25) Gerald Combs ♦♦