# SSL/TLS decryption

**URL:** <https://community.zeek.org/t/ssl-tls-decryption/4915>\
**Category:** Zeek\
**Created:** [June 21, 2017, 7:51pm UTC](https://community.zeek.org/t/ssl-tls-decryption/4915 "2017-06-21T19:51:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ben\_Mixon-Baca](https://avatars.discourse-cdn.com/v4/letter/b/f9ae1b/32.png) [@Ben\_Mixon-Baca](https://community.zeek.org/u/Ben_Mixon-Baca)\
**Post date:** [June 21, 2017, 7:51pm UTC](https://community.zeek.org/t/ssl-tls-decryption/4915/1 "2017-06-21T19:51:26Z")

</div>

Hello,

Is bro capable of decrypting SSL/TLS flows if I provide it a private key  
for the flow?

---

<div class="post-metadata">

**Author:** ![Osama\_Elnaggar](https://avatars.discourse-cdn.com/v4/letter/o/ba8739/32.png) [@Osama\_Elnaggar](https://community.zeek.org/u/Osama_Elnaggar)\
**Post date:** [June 21, 2017, 8:55pm UTC](https://community.zeek.org/t/ssl-tls-decryption/4915/2 "2017-06-21T20:55:11Z")

</div>

No. Here is the last thread that discussed this back in 2015 - [http://mailman.icsi.berkeley.edu/pipermail/bro/2015-June/008568.html](http://mailman.icsi.berkeley.edu/pipermail/bro/2015-June/008568.html) However, some people were able to successfully extend Bro to do this but none of these implementations was released.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:45pm UTC](https://community.zeek.org/t/ssl-tls-decryption/4915/3 "2022-05-06T15:45:04Z")

</div>