TLS partially decrypted

retag add tags

Hello Guys,

I tried to decrypt TLS but I have a question.

I'm tracking a HTTP stream but I'm unable to decrypt the client/serveur hello part of the stream. The HTTP packets are decrypted (security layer is well present in packet details).

Is it a normal behavior or somekeys are missing from my sshkeylog file ?

I need to decrypt the client/server hello because I received a "redirect" but I need the details of it.

Thanks for your help.

hjacquemin

asked 2022-01-26 08:54:42 +0000

edit flag offensive 0 remove flag close merge delete

Comments

Hi,

Could you please share the pcap file in question and also the SSLkey file, so I can take a look?

Best Regards, Denzil D'Souza

ddsouza (2022-01-28 12:16:04 +0000) edit

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

TLS partially decrypted edit

Comments

Be the first one to answer this question!

TLS partially decrypted