ssl - TLS V1.2的Wireshark解密

Question

我有客户端(通过 https 发送 XML)到我的 IIS 之间的流量。
我尝试使用 Wireshark 和下一个设置解密流量:
添加私钥:

但即使在设置后
我看到看不到解密的数据:

我应该做任何其他设置来查看原始数据吗？

Answer 1

很有可能是 迪菲-赫尔曼 (DH) key 交换在这里被使用。在这种情况下，Wireshark 无法使用私钥解密 SSL/TL。您可以在握手包中检查这一点。
来自 Docs :

The RSA private key file can only be used in the following
circumstances:

• The cipher suite selected by the server is not using (EC)DHE.
• The protocol version is SSLv3, (D)TLS 1.0-1.2. It does not work with TLS 1.3.
• The private key matches the server certificate. It does not work with the client certificate, nor the Certificate Authority (CA)
  certificate.
• The session has not been resumed. The handshake must include the ClientKeyExchange handshake message.