Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

mikegray_198028's avatar
mikegray_198028
Icon for Cirrus rankCirrus
May 26, 2017

Decrypt TLSv2

Is there any option to decrypt TLSV2 traffic, using ssl dump or using key?

 

3 Replies

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    May 31, 2017

    Yes you can decrypt the data by specifying the path, Use SSLDUMP command,

    ssldump -Aed -nr /var/tmp/yourpacketcapture.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.site.com.key_1

  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    May 31, 2017

    Hi,

     

    Possibility to decrypt traffic depends on ciphers used. If RSA key exchange is used it should be possible to decrypt, if DH is used or any other Forward Secrecy or Perfect Forward Secrecy cipher suites then it is not possible.

     

    It is not possible as well to decrypt resumed session. Capture must contain full SSL Handshake.

     

    Piotr