What you need is the server private key (and of course the password to
decrypt it). You appear to have it, but I would double check with the
openssl rsa command. ssldump will silently ignore an incorrect password.
Also, ssldump will not decrypt resumed ssl sessions. You can detect whether
the session was resumed by looking at the session id's in the clear text
handshake messages.
____________________________________
Greg Stark
Ethentica, Inc.
[EMAIL PROTECTED]
_____________________________________
----- Original Message -----
From: "Roberto Rodrigues - McLean" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 17, 2001 7:30 PM
Subject: ssl/ssldump question
> hi,
>
> I'd would appreciate some help on the SSLdump tool.
>
> What is the exact keying material needed by SSLdump in order for it to
show
> appl data ?
>
> I've created the server key and cert, put them both on the server machine
> (SSL server running apache+modssl) and on the client machine. Even though
> both machines use the same files, apparently the SSLdump tool located on
the
> client side cannot show appl data.
>
> this is how I'm running SSLdump:
>
> ssldump -AXdn -i xl0 -k ./server.key -p "hello"
>
> What am I missing ? (format of the key) Why isn't SSLdump complaining
about
> it then ?
>
> thanks a lot,
> roberto.
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
