I am new to Wireshark, I run v1.6.7 on Ubuntu Desktop. I can decrypt HTTPS Traffic with my private key, works fine. I can see decrypted traffic as http.
In order to send the capture to a vendor, I export the SSL Session Keys to file. Before sending the Session Keys and capture to the 3rd party, I want to test the decryption with the exported SessionKeys. I create a new profile, protocols and for (Pre)-master-secret log file name I put the path of the SSL Session Keys. However, if I click on apply, nothing happens. The SSL debug log file is empty.
What do I miss ?
Thanks in advance for your answers.
asked 09 Oct '13, 05:13
Were there any keys saved in the file to which you exported the SSL Session Keys? Do the Session-ID's match the ones seen in the trace file?
The SSL debug file should at least list that it sees SSL traffic. Do you see SSL in the packet list? Are you running SSL on a non-standard port? If so, please add the port to the HTTP settings.
answered 09 Oct '13, 13:43