Here is a high level explanation of how Wireshark can retrieve this key: All it needs is the Master Key used in encrypting the data. Wireshark is one of the more famous packet analyzers out there, and it's capable of decrypting SSL/TLS communications. Instead, it's about how to retrieve key material for decryption. Please note that the topic of this post is not methods for breaking crypto-systems. I will focus on Ruby and the binding for OpenSSL. In this blog post, I will explain how to decrypt SSL/TLS communications to allow for the analysis of that traffic with Wireshark. Our team, responsible for the Trustwave network vulnerability scanning system, regularly encounters this situation - especially when scanning systems we don't control (mostly those of customers). However, this process can be tricky when the communication is encrypted.

A common method is capturing the traffic using a packet analyzer tool such as tcpdump or Wireshark. Debugging a program that communicates with a remote endpoint usually involves analyzing the network communications.

Decrypt https wireshark