Wireshark-bugs: [Wireshark-bugs] [Bug 3444] Need the ability to export SSL decrypted captures
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3444
--- Comment #17 from Sake <sake@xxxxxxxxxx> 2011-05-25 15:26:30 PDT ---
For the impatient (after two years ;-)), you can now transform information from
the SSL debug file into the proper format and use that as key list file. You
need all the following blocks from the SSL debug file:
ssl_save_session stored session id[32]:
77 60 f7 be a5 96 5c 80 aa 15 3d 81 e1 b2 6f 3a
fd 88 e7 3a 93 90 5f bc ba b7 d9 9e 54 a8 8c 30
ssl_save_session stored master secret[48]:
33 f1 29 d8 bc 5d 61 d9 9a d6 85 28 4e 49 ac 40
46 58 c6 c4 2a 4f 74 a1 25 ab 04 10 3f 9f f1 77
f9 23 7a bd 99 ea 94 96 e2 17 fa 09 1b b7 86 7c
And transform them into lines like:
RSA Session-ID:7760f7...a88c30 Master-Key:33f129...b7867c
(bytes in between omitted for clarity of the syntax of the line)
Don't put to much effort in scripting this, as I hope to implement the export
feature somewhere the coming two weeks.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.