Forum Discussion

Michel_van_der_'s avatar
Michel_van_der_
Icon for Nimbostratus rankNimbostratus
Mar 14, 2005

Decrypting SSL SOAP traffic

I'm using Soap::Lite to do my iConrol work. I've been trying to

 

track donw a rather insidious bug, that proves to be hard to

 

find. I'd like to be able to decrypt the iControl data stream

 

to the BigIP using ssldump (i.e. capture my data using tcpdump,

 

getting the F5 server key and using that to decrypt with ssldump).

 

 

Can someone tell me where to find the SSL server key on the

 

F5, or, better, show exactly how it's done?

 

 

Thanks.

 

dev
devops
iControl
v4
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Mar 14, 2005
    Is there a reason you aren't using SOAP::Lite's built in debugging. I'm assuming you want to decrypt the iControl message to/from the server. If you use the SOAP::Lite debugging you will get both the outbound and returning streams in clear text.

    Replace this line 

    use SOAP::Lite

    with 

    use SOAP::Lite + trace => qw(method debug);

    And you will get everything in clear text in your client console.

    -Joe
  • Loc_Pham_101863's avatar
    Loc_Pham_101863
    Historic F5 Account
    Mar 14, 2005
    In 4.x, the locations of the server keys, certs, CSRs, CRLs are:

     

     

    /config/bigconfig/ssl.key

     

    /config/bigconfig/ssl.crt

     

    /config/bigconfig/ssl.csr

     

    /config/bigconfig/ssl.crl

     

     

    Loc