Decode SSL transport with PEM file that has a passphase

Question

I am trying to decode a PCAP file that has SSL transport. It has a PEM file with a passphase. Seems like that is a limitation that it doesn't work if the PEM has a passphase. Scenario: View -> Preferences -> SSL -> RSA keys list => add PEM file with pasephase

Any workaround how to remove passphase? Thanks

Answer 1

Given a PEM-encoded private key file (beginning with -----BEGIN ENCRYPTED PRIVATE KEY-----), you can remove the passphrase with the openssl program:

openssl rsa -in encrypted-key.pem  -out key.pem

The resulting key.pem file will then begin with -----BEGIN RSA PRIVATE KEY----- which is accepted by Wireshark.