How to enable TLS? about docker_open5gs HOT 9 OPEN

It doesn't work, but I find the solution.
In the RSA keys list, put in the private key, then right-click on the client hello packet and select Decode As to add the TCP port as shown in the figure.

Then you can decrypt the TLS packet into an HTTP/2 packet.

Thank you for your help!!!

from docker_open5gs.

hmmm.. I have yet to adapt to latest open5gs release (v.2.7.0), which underwent a lot of changes in configuration. Will let you know once I add support for enabling TLS.

from docker_open5gs.

Thank you! I'm using v2.6.6 now, if you have any suggestions you can provide them too! Thanks!!

from docker_open5gs.

Hi! I changed the scheme to https successfully. However, where can I find the sslkey.log to decrypt TLS packet? Thanks!!

from docker_open5gs.

I changed the scheme to https successfully. However, where can I find the sslkey.log to decrypt TLS packet?

I am not sure which sslkey.log you are referring to.

from docker_open5gs.

I changed the scheme to https successfully. However, where can I find the sslkey.log to decrypt TLS packet?

I am not sure which sslkey.log you are referring to.

I want to decrypt TLS to HTTP/2 packets in Wireshark, so I need to put the current generated "sslkey.log" in the (Pre)-Master-Secret log filename. Or is there another way to decrypt TLS packets?

from docker_open5gs.

Rather than that I believe you would have to provide .key file in below entry

The key you have to provide there is the one you mentioned in configuration file

key: /open5gs/install/etc/open5gs/tls/nrf.key

from docker_open5gs.

I try it. However, the TLS packets didn't be decrypted into HTTP/2 packets. I think the reason is that the cipher suite is TLS_AES_256_GCM_SHA384, as shown in the figure. It needs a session key instead of a private key like free5GC.

But I didn't find anything about the session key (e.g. sslkey.log). Please tell me if you have any suggestions. Thanks!!

from docker_open5gs.

Here is a perfect article about to how to decrypt TLS traffic - https://support.citrix.com/article/CTX135889/how-to-export-and-use-ssl-session-keys-to-decrypt-ssl-traces-without-sharing-the-ssl-private-key

Hope it helps

from docker_open5gs.