

Open the server certificate of an IIS website, click Details tab, click Copy to File.Ĭlick Next in the wizard, select Yes, export the private key, then click Next.Ĭhoose Personal Information Exchange - PKCS # 12 (.PFX), leave the three checkboxes unchecked, click Next.Ĭheck Password and set a password, click Next and then export the PFX file.Ĭonfigure Wireshark to use the private key for decryptionĪfter having the PFX file, we can configure Wireshark to use the private key to decrypt SSL/TLS packets.

Export the private key of a server certificate from an IIS serverįirst, we need to export the private key from the web server, take the IIS server as an example here. The first method is: Using the private key of a server certificate to decrypt SSL/TLS packets.

Using the private key of a server certificate for decryption Actually Wireshark does provide some settings to decrypt SSL/TLS traffic. However I can only see encrypted network packets in Wireshark because all browsers only support HTTP/2 that run over TLS.
