Hacker News new | ask | show | jobs
by chrj 3746 days ago
If you have the private key, you can decrypt it in Wireshark.
1 comments
nly 3746 days ago
Inaccurate. Most browsers will now be using ephemeral key exchange. You pretty much have to configure one of the end points to dump session keys to a log file, then load that in to wireshark alongside the packet dump.
link
amelius 3746 days ago
It would be nice if there was some automated way to do this.
link
mhils 3746 days ago
You can use mitmproxy [1] to dump the TLS Master Secrets for all connnections it intercepts [2]. The dumpfile goes straight into WireShark.

Obligatory disclaimer: I'm one of the mitmproxy authors - happy to answer any questions.

[1] https://mitmproxy.org/

[2] http://docs.mitmproxy.org/en/stable/dev/sslkeylogfile.html

link