Re: [389-users] Decrypting SSL for 389-ds

David Boreham <david_list@xxxxxxxxxxx> · Fri, 12 Nov 2010 09:03:58 -0700



    On 11/12/2010 8:59 AM, Gerrard Geldenhuis wrote:
    
      
        I am trying to decrypt SSL traffic capture
          with tcpdump in wireshark. A quick google turned up a page
          that said the NSS utils does not allow you to expose your
          private key. Is there different way or howto that anyone can
          share to help decrypt SSL encrypted traffic for 389?
      
    
    I think you're confused about the private key : you had to have had
    the private key in order to configure it in the server.

    So find the file, and feed that to Wireshark. Note that WS can not
    currently decrypt certain ciphers (and it won't simply tell you that
    it can't -- instead you waste days of your time before the penny
    drops). Hopefully your client is not negotiating one of those.

    
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users