I am a novice with networking and unix and trying to debug an issue but I have been able to capture packets using tshark in order to analyze and inspect why clients are receiving 401 errors on initial connect. The quick solution is to not enforce https but this is a production server and is not an option. This server runs behind an HAProxy and uses https so the packets are encrypted. I have searched online for ways to decrypt and found some examples but each leads to some sort of error that cannot be debugged. For example: - One suggestion is to create the RSA cert and key pair - run the server - capture traffic from another session
tshark -r ssltest.pcap -V -x -o "ssl.debug_file:ssldebug.log" -o "ssl.desegment_ssl_records: TRUE" -o "ssl.desegment_ssl_application_data: TRUE" -o "ssl.keys_list:127.0.0.1,4443,http,server.pem"
this is supposed to decrypt the packets but what I find is more detail in the output but no readable information like header info.