Wireshark-bugs: [Wireshark-bugs] [Bug 10984] SSL Decrypted Packet Not Decoded As HTTP

Date: Mon, 23 Feb 2015 17:48:47 +0000

changed bug 10984


What Removed Added
CC   [email protected]

Comment # 8 on bug 10984 from
(In reply to Alexis La Goutte from comment #6)
> (In reply to Peter Wu from comment #5)
> > By removing `ssl_dissector_add`, won't you disable the "spdy" protocol
> > selection option at the RSA keys dialog?
> 
> After quick check... yes !
> May be add (like HTTP2) with heur_dissector_add("ssl".... (and also add
> option to disable SPDY Heuristic by default)

That doesn't make sense.  Or else my change
I1b72bccd4c96c21c73a19fa2d87fe2c0b875a0fa was wrong.  My belief (when I made
that change) was that any protocol registered by name (by calling
*register_dissector()) can be used in the SSL keys UAT.

I also just tried commenting out the ssl_dissector_add() in packet-spdy.c and I
was able to decrypt the sample SPDY capture (attached to bug 9821) just fine. 
(OK, when I first started Wireshark with the appropriate key already there it
didn't decrypt; I had to go into Preferences and go out again to get it to
work--maybe that's related what Peter mentioned in comment 3: that HTTP is
re-registering port 443 regularly.)


You are receiving this mail because:
  • You are watching all bug changes.