# HTTP/1.1 over TLS 1.2 with AES-GCM

HTTP/1.1 over TLS 1.2 with AES-128-GCM: a minimal synthetic handshake, then one GET and its response.

- What success looks like: The request and the response decoded.
- What error it exposes: A TLS 1.2 PRF or explicit-nonce bug.
- Kind: synthetic (generated, no real traffic)
- Protocols: HTTP/1.1, TLS 1.2
- Keys: embedded in tls12-h1.pcapng as a Decryption Secrets Block, and in tls12-h1.keys.txt as an NSS key log
- Expected decoded output: tls12-h1.expected.json (JSON), confirmed by an independent decoder before publication
- Regenerate: cargo run -p synthetic-pcap --example tls12_h1_gen -- --name tls12_h1 --out <dir>
- Licence: Creative Commons Attribution 4.0 International (CC BY 4.0), for the released capture and expected-output files only. Attribution: Shorenet Ltd.
- Download all: tls12-h1.zip holds these files, the licence text (LICENCE.txt) and their SHA-256 (SHA256SUMS)

## Files

- tls12-h1.pcapng
- tls12-h1.keys.txt
- tls12-h1.expected.json
- tls12-h1.md