Decrypt TLS with Wireshark

[pssh]

My set-up is;

PC with wired (RTL8111) and wireless (AX201) cards.

Device that has an "Streaming app" installed connects to
AP created on the PC.


# Creating AP (with NM = NetworkManager);

systemctl status NetworkManager

sudo iwconfig

nmcli -f WIFI-PROPERTIES.AP device show wlan0

nmcli d wifi hotspot ifname wlan0 ssid FireTV password MT8695D

nmcli con show

nmcli device wifi

# I would then install/run "Wireshark";

sudo apt install -y wireshark

# Wireshark 4.4.3

wireshark --version

sudo wireshark

Up to here, it's all good
and "http" traffic (its 2025 and there is still http shows up in wireshark when selecting wlan0 .....


So consulting following info/guides:
https://web.archive.org/web/20190608092620/https://wiki.wireshark.org/SSL
https://wiki.wireshark.org/TLS
https://tlswg.org/sslkeylogfile/draft-ietf-tls-keylogfile.html
and
https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/


#

nano ~/.bashrc

export SSLKEYLOGFILE=~/Documents/Wireshark/ssl-key.log

echo $SSLKEYLOGFILE

Ctrl+Shift+P
- Protocols -> TLS:
-- TLS debug file:

~/Documents/Wireshark/ssl-debug.log

-- (Pre)-Master-Secret log filename:

~/Documents/Wireshark/ssl-key.log

and trying on HTTPS Website, but,
my "ssl-key.log" is empty ....

dpkg -l | grep -i openssl
ii  libcurl4t64:amd64                                8.11.1-1+b1                               amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  libgnutls-openssl27t64:amd64                     3.8.8-2                                   amd64        GNU TLS library - OpenSSL wrapper
ii  libsrt1.5-openssl:amd64                          1.5.4-1                                   amd64        Secure Reliable Transport UDP streaming library (OpenSSL flavour)
ii  libssh-4:amd64                                   0.11.1-1                                  amd64        tiny C SSH library (OpenSSL flavor)
ii  openssl                                          3.4.0-2                                   amd64        Secure Sockets Layer toolkit - cryptographic utility
ii  openssl-provider-legacy                          3.4.0-2                                   amd64        Secure Sockets Layer toolkit - cryptographic utility
ii  perl-openssl-defaults:amd64                      7+b2                                      amd64        version compatibility baseline for Perl OpenSSL packages
ii  ssl-cert                                         1.1.3                                     all          simple debconf wrapper for OpenSSL

What I want to do,
is to have a look at what the "Streaming" app is sending/receiving via TLSv1.2/3 .....

And also via firefox and the "Streaming" website .....


Where did I go wrong?