Wireshark-users: Re: [Wireshark-users] Extracting SSL certificate from SSL handshake
Hi Robert,
On 19 okt 2011, at 08:49, Robert Kochem wrote:
> On Wed, 19 Oct 2011 00:32:40 +0200 wrote Sake Blok:
>
>> To extract a certificate, select the packet that contains the
>> (reassembled) SSL Handshake message "Certificate". Expand the
>> Certificates until you have list of Length and Certificate lines. Right
>> click on the cetificate that you want to extract and choose for "Export
>> Selected Bytes". It will save the certificate in DER format to the file
>> you specify.
>
> OK now I got it. But this only works in the main window. I had opened a
> separate window via double click on the packet marked as "Certificate,
> Server Hello Done" (also available as function "Show packet in new
> window") and in that window you have the same protocol entries including
> the certificate but no context menu for exporting it (Version 1.6.2 Win32).
> Is this is a bug? If not it is a very confusing behavior...
It is not a bug, the context menu for the individual packet window has just not been implemented yet. As with all functionality in Wireshark:
a) someone needs to come up with the idea of some functionality
b) someone needs to take interest in writing the code and have time to do it
For the context menu in the single packet window, there is already an enhancement request on bugzilla (which is the place where people can express their ideas for new functionality if they are not able to write the code themselves). It has so far not been picked up by anyone to write the code.
I do agree with you that having the context menu on the single packet window would be nice to have.
Cheers,
Sake
