Wireshark-users: Re: [Wireshark-users] Extracting data from capture
From: Sake Blok <sake@xxxxxxxxxx>
Date: Fri, 3 May 2013 09:53:29 +0200
Hello Satish,

You're welcome. More help can be found on http://ask.wireshark.org if you need it in the future, it kind  of took over the role of the users-mailinglist

Cheers,
Sake


On 3 mei 2013, at 03:24, radiatejava wrote:

> Hello Sake,
> you saved my day, great and thank you!!. Also glad that the forum works here.
> 
> -Satish
> 
> On Thu, May 2, 2013 at 5:01 PM, Sake Blok <sake@xxxxxxxxxx> wrote:
>> Hi,
>> 
>> I had a little trouble too, but google was a friend. As the certificate(s) are sent using SCEP, I looked up how SCEP transfers certificates and found out it is using pkcs7. Then the file is in DER form (as I could see several binary certificates in the exported HTTP object). Then openssl pkcs7 help did the rest. Here is how you can extract the certificates:
>> 
>> openssl pkcs7 -inform DER -in <exported-http-object-filename> -print_certs
>> 
>> Good luck!
>> Sake
>> 
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe