Wireshark-users: Re: [Wireshark-users] SSL Decoding fails on Linux, works on Windows 7 64-bit
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Mon, 20 Aug 2012 21:21:42 +0200
On 20 aug 2012, at 21:05, Bas Nedermeijer wrote:

> The ssl.debug file (partial) of the Linux version (which fails). Some filenames 
> have been altered. But the KeyID shows it is the same private key.
> [...]
> ssl_decrypt_pre_master_secret wrong pre_master_secret length (87, expected 48)
> dissect_ssl3_handshake can't decrypt pre master secret

Are you sure the configured key matches the certificate in the tracefile? Every time I have encountered the above messages, I was using a key that did not match the certificate

> I hope this is enough information. I cannot share the actual captured data and 
> key. But if needed I think I can reproduce the problem with a self-signed key 
> (and dummy session).

If you do have a matching certificate and key and you still get this message, please reproduce the issue with files that you can share :-)

Cheers,
Groeten,


Sake