Monday, June 20, 2016

Decode SSL With Wireshark

Warning, serious technical overload ahead...

Encryption is a wonderful thing ... unless you're trying to debug a problem, then it throws up a huge roadblock because all you see is gibberish instead of clear text.  For the Chrome and Firefox web browsers (sorry IE users, somebody is still clueless), the SSLKEYLOGFILE environment variable is the key to clarity.  Give its value a proper disk location (1st screenshot) and the browsers will log the secret keys. Then setup Wireshark  (2nd screenshot) with the same filename to decode the encrypted gibberish.

No comments:

Post a Comment