ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 3343] New: No SSL decryption using IPv6

Date: Thu, 19 Mar 2009 08:03:50 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3343

           Summary: No SSL decryption using IPv6
           Product: Wireshark
           Version: 1.0.6
          Platform: SPARC
        OS/Version: Solaris
            Status: NEW
          Severity: Enhancement
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: paul.drasler@xxxxxxx


Build Information:
wireshark 1.0.6

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.4.9, with GLib 2.4.1, with libpcap 0.9.4, with libz 1.2.3,
without POSIX capabilities, without libpcre, without SMI, without ADNS, without
Lua, with GnuTLS 2.0.4, with Gcrypt 1.4.1, without Kerberos, without PortAudio,
without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on SunOS 5.10, with libpcap version 0.9.4.

Built using Sun C 5.9

--
No SSL decryption for IPv6


> Running verison 1.0.6 of wireshark compiled on Sparc Solaris 10. Using 
> the private key of my server I am able to decode SSL/TLSv1 packets 
> between my client and server using IPv4 but if the same client and 
> server use IPv6 I am not able to decode the SSL/TLSv1 packets. I have 
> the correct addresses both IPv4 and IPv6 and ports configured on the 
> RSA Key List parameter along with the private key.


email response from Steve Fischer

I just took a look at the source code 
(epan/dissectors/packet-ssl-utils.c: ssl_parse_key_list) and much to my 
surprise, it doesn't appear to support IPv6 addresses for SSL 
decryption.  Would you mind opening a bug marked as an enhancement 
request on https://bugs.wireshark.org to ask for IPv6 support for SSL 
decryption?


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.