Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Jul 25, 2014

Unable to generate PMS Key to decrypt SSL Traffic in Wireshark.

Hello Folks, Recently I was troubleshooting an issue, where SSL Offloading was configured on F5. I wanted to wrap off the TLS in order to analyze HTTP traffic. While generate the PMS key, I found f...
debugging
pms key
ssldump
Kevin_K_51432's avatar
Kevin_K_51432
Historic F5 Account
Jul 25, 2014

Hi Darshan, I'm not very familiar with that error. What little testing I did shows this may be due to using the wrong name. There is dtca.key, but no dtca1.key:

 ssldump -k /config/ssl/ssl.key/dtca.key -r /var/tmp/this.dmp port 443
 ssldump -k /config/ssl/ssl.key/dtca1.key -r /var/tmp/this.dmp port 443
Problem loading private key
ERROR: Couldn't create network handler

Hope this offers some help.

Kevin