Wireshark-users: Re: [Wireshark-users] Extracting SSL certificate from SSL handshake
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Robert Kochem <robert@xxxxxxxxxxxxxxxx>
Date: Wed, 19 Oct 2011 06:49:26 +0000 (UTC)
Hi Sake.

OK now I got it. But this only works in the main window. I had opened a 
separate window via double click on the packet marked as "Certificate, 
Server Hello Done" (also available as function "Show packet in new 
window") and in that window you have the same protocol entries including 
the certificate but no context menu for exporting it (Version 1.6.2 Win32).
Is this is a bug? If not it is a very confusing behavior... 

Robert

On Wed, 19 Oct 2011 00:32:40 +0200 wrote Sake Blok:

> To extract a certificate, select the packet that contains the
> (reassembled) SSL Handshake message "Certificate". Expand the
> Certificates until you have list of Length and Certificate lines. Right
> click on the cetificate that you want to extract and choose for "Export
> Selected Bytes". It will save the certificate in DER format to the file
> you specify.