I have a pcap of a HTTPS session. When trying to decrypt it, it complained about "decrypt_ssl3_record: no decoder available". I have made sure I am not using DHE based cipher, but still getting the above message. asked 12 Sep '15, 22:08 pktUser1001 |
I have a pcap of a HTTPS session. When trying to decrypt it, it complained about "decrypt_ssl3_record: no decoder available". I have made sure I am not using DHE based cipher, but still getting the above message. asked 12 Sep '15, 22:08 pktUser1001 |
Can you try the latest development version of Wireshark? Either your private key is wrong or you are affected by a very specific bug which is fixed in the development version (https://code.wireshark.org/review/9573).
Thanks @lekensteyn for the suggestion, I just downloaded the source and built it, still has the error "decrypt_ssl3_record: no decoder available". The pcap file URL is in the question, the cert and priviate key is here: http://pastebin.com/2ZX9b1Pj Thanks!