Wireshark mailing list archives

Extracting SSL Certs using Tshark


From: Shaanan Cohney <shaananc () hotmail com>
Date: Mon, 17 Nov 2014 01:12:28 -0500


Hi,I was wondering if it is possible/how one extracts SSL certs from Server Certificate messages using only tshark. I 
see in the display filter page for SSL both ssl.handshake.certificate and ssl.handshake.certificates but neither seem 
to extract the necessary bytes on my pcaps.
Thanks!                                           
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: