This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

SSL Decrypt works depending on the used browser

0

Hello all,

I have a "strange" problem with SSL decoding and I don't know how to explain it. I have a test server (apache+ssl) and I access that server with IE 8. Wireshark configured with the corect server SSL key, everything is working fine and I can see the SSL stream decoded.

Same scenario, but I use Firefox 14. In this case I cannot see anything being decoded.

Does anybody has an explanation for this or a point to start looking for a possible solution?

Just to avoid any useless discussions, on both test I start the Wireshark and then the browser so I capture the entire stream with initial SSL handshake.

Thanks a lot!

asked 24 Aug '12, 06:17

yotis's gravatar image

yotis
1111
accept rate: 0%


One Answer:

1

Is it that Firefox permits the DH cipher and IE 8 doesn't? SSL decryption requires use of an RSA cipher not a DH one. The client and the server negotiate on the cipher to be used. See the answers to this question

answered 24 Aug '12, 06:25

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%