Ask Your Question

Revision history [back]

Do not see decrypted TLS on MacOS

I cannot see the decrypted data of TLS data with Wireshark on my Mac as uncompressed. I have followed the web sites' instructions: https://gist.github.com/EddiG/dc852072c7ba367149b2f6c98fb540b3 https://ladydebug.com/blog/2021/10/15/decrypting-tls-data-with-wireshark-on-mac/

Whatever SSL Web site that I visit, I still the data encrypted in Wireshark after following the instructions. There is no option to uncompress the data in Wireshark. All of the compressed data still appears as "TLSv1.2". Also I have updated the Wireshark | "Preferences..." | Protocols | TLS | (Pre)-Master-Secret log filename. And I have setup my "SSLKEYLOGFILE" environmental variable. Chrome and Firefox browsers both see the same issue as the instructions say that it should work.

My environment: M1 Mac laptop with the MacOS version: 12.5.1 (21G83) (Monterey) Wireshark version: 3.6.7 (v3.6.7-0-g4a304d7ec222) Chrome version: 104.0.5112.101 (Official Build) (arm64) Firefox version: 104.0 (64-bit)