Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9144] [PATCH] Support for Camellia/more TLS ciphers

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 2 on bug 9144 from Peter Wu

Created attachment 11565 [details]
repro-sslv3.tar.gz (premaster, pcapng, ssl debug_file)

A test capture for two SSLv3 cases where the dump could not be decrypted:

- TLS_RSA_WITH_IDEA_CBC_SHA (0x0007) - wrong mode, patch will follow.
- TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 (0x0006) - libgcrypt does not support RC2,
although there was a discussion of this[1].

Command to generate dump-broken.pcapng:
dumpcap -f '(host ::1 or host 127.0.0.1) and tcp portrange 4433-4516' -i lo -w
dump-broken.pcapng

Command to generate debug.txt (using wireshark trunk with debugging patch):
wireshark -o ssl.keylog_file:$PWD/premaster.txt dump-broken.pcapng -o
http.ssl.port:4433-4516 -o ssl.debug_file:debug.txt

 [1]: http://lists.gnupg.org/pipermail/gcrypt-devel/2003-June/000311.html

---

      You are receiving this mail because:

• You are watching all bug changes.