How to troubleshoot SSL/TLS handshake in Google Chrome browser?

Question

I would like to inspect the SSL/TLS handshake in Google Chrome (or Chromium) browser.

I'm looking for output similar to what you'd see using commands like these from other HTTPS clients (just examples):

➜  ~  curl -k -v https://example.com:443 --tlsv1

or

➜  ~  openssl s_client -debug -connect example.com:443 -tls1

I've searched a bit, and it doesn't look like native tools (ie via inspect element) nor plugins have this level of visibility.

Ranking

I would suggest trying a man-in-the-middle SSL proxy using Fiddler or Charles. I've had decent luck with those. – Nonplus

Thanks. Unfortunately, Fiddler and Charles don't provide the detailed logging that a client can provide. – Ranking

it would have been nice if Chrome Inspector would allow you to copy and paste the entire curl command WITH the certificate passed. I'm assuming it doesn't. I couldn't get it working. – Predetermine

Answer 1

You can use Wireshark to capture the network packets, and use the

Menu->Statistics->Flow Graph 

To view the network sequence as below. Below diagram illustrates the TCP flow visiting stackoverflow.com.

Meanwhile, you can click on the arrows in the diagram to inspect down to ethernet frame level, including TCP/IP/Ethernet packets.

Appealing

Answer 2

I found chrome://net-export very useful for tracing down communication issues like SSL handshake in Chrome browser.

Unfortunately, it needs a Chrome plugin for better visualization of the resulting JSON file.

Holt