Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Unable to decrypt HTTPS TLSv1.2 traffic with wireshark (sha1WithRSAEncryption)

am trying to debug a server-client app and can't get wireshark to decrypt the traffic.

  • I tried Wireshark 2.4.5 and 2.6.2
  • I started the capture before launching my client and can see "Not using Sesion resumption" in the wireshark log
  • Wireshark recognizes the cipher as 0x009D TLS_RSA_WITH_AES_256_GCM_SHA384
  • I've verified that they public key passed to mbedtls is a match to the corresponding private key given to wireshark's SSL tool
  • I get 0/(nil) in ssl_find_private_key_by_pubkey: lookup_result in wireshark
  • All the "using server decoder messages" are followed by "no decoder available"

ideas?

Unable to decrypt HTTPS TLSv1.2 traffic with wireshark (sha1WithRSAEncryption)

am trying to debug a server-client app and can't get wireshark to decrypt the traffic.

  • I tried Wireshark 2.4.5 and 2.6.2
  • I started the capture before launching my client and can see "Not using Sesion resumption" in the wireshark log
  • Wireshark recognizes the cipher as 0x009D TLS_RSA_WITH_AES_256_GCM_SHA384
  • I've verified that they public key passed to mbedtls is a match to the corresponding private key given to wireshark's SSL tool
  • I get 0/(nil) in ssl_find_private_key_by_pubkey: lookup_result in wireshark
  • All the "using server decoder messages" are followed by "no decoder available"

ideas?

Unable to decrypt HTTPS TLSv1.2 traffic with wireshark (sha1WithRSAEncryption)

am trying to debug a server-client app and can't get wireshark to decrypt the traffic.

  • I tried Wireshark 2.4.5 and 2.6.2
  • I started the capture before launching my client and can see "Not using Sesion resumption" in the wireshark log
  • Wireshark recognizes the cipher as 0x009D TLS_RSA_WITH_AES_256_GCM_SHA384
  • I've verified that they public key passed to mbedtls is a match to the corresponding private key given to wireshark's SSL tool
  • I get 0/(nil) in ssl_find_private_key_by_pubkey: lookup_result in wireshark
  • All the "using server decoder messages" are followed by "no decoder available"

ideas?