Decrypting encrypted traffic (SSL/TLS)

Yes, it is also possible to decrypt your online TLS traffic into a plaintext SSL stream using Wireshark. Google Chrome and Firefox look for a log file, which stores the TLS session keys. Follow these steps to decrypt a session of encrypted traffic:

  1. Create an environment variable with the name SSLKEYLOGFILE that will point to a text file. Your browser will look for this file every time it starts up. To create environment variables, right-click on My Computer and go to Advanced Settings | Environment Variables | New | Specify Name. Enter SSLKEYLOGFILE and Value: C:/Users/username/sslkeylog.txt, and click on OK.
  2. I have created a blank text file, C:/Users/username/sslkeylog.txt (make your new environment ...

Get Wireshark 2 Quick Start Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.