Wireshark-users: [Wireshark-users] Extracting SSL Certs using Tshark

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Shaanan Cohney <shaananc@xxxxxxxxxxx>
Date: Mon, 17 Nov 2014 01:12:28 -0500

Hi,
I was wondering if it is possible/how one extracts SSL certs from Server Certificate messages using only tshark. 
I see in the display filter page for SSL both ssl.handshake.certificate and ssl.handshake.certificates but neither seem to extract the necessary bytes on my pcaps.

Thanks!