Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

TLS decryption with Tshark and RSA keys

I currently use tshark to decrypt an RSA stream using the ssl.keys_list options. In the latest version of tshark this has been changed to tls.keys_list and marked as obsolete - this means I can't use this option.

The solution is to use a ssl debug file in NSS format. The problem is that this format doesn't seem to support RSA key files. https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Key_Log_Format

I can still load my RSA key into the latest version of Wireshark and get the same effect. How can I continue to use an RSA keyfile to decrypt my traffic?