gcla / termshark

A terminal UI for tshark, inspired by Wireshark
MIT License
9.06k stars 397 forks source link

Support decrypting HTTPS/TLS traffic via SSLKEYLOGFILE #145

Open andreas-mausch opened 1 year ago

andreas-mausch commented 1 year ago

Wireshark offers a way to decrypt HTTPS traffic via the environment variable SSLKEYLOGFILE and the Wireshark configuration (Pre)-Master-Secret.

See here for example.

I couldn't find a way to use it with termshark. If it already supports this feature, please ignore this issue.

I'd like to pass the log filename via a cli option to termshark. termshark then uses the log file to decrypt TLS traffic the same way Wireshark does it.