Forum Discussion
Lerna_Ekmekciog
Nimbostratus
NimbostratusSsldump
I have a Java app that uses iControl api to query the device via SOAP calls. I'd like to be able to get a capture of the packets in between my app and the bigip using ssldump. I need to provide a key to ssldump to decrypt the contents of the packets. What key should be used to decrypt the contents of the packets? I have already tried /config/ssl/ssl.key/default.key and /config/httpd/conf/ssl.key/server.key from the bigip but no success. I have a case open with you C295501 and have wasted couple of days on this already. Pls let me know what key is the right one.
Lerna
paul_adomeit_70(I don't work for F5 but happened to see this)
Mine uses the key that's applied via system -> platform. Click on the Web Server Certificate tab. Click on the key tab and there's an export button.
Or...scp it from the box from:
/config/httpd/conf/ssl.key/server.key
If you need the certificate, it's in:
/config/httpd/conf/ssl.crt/server.crt
-p
Lerna_EkmekciogThere was an issue with ssldump on the version of bigip we run in the lab. Once I switched to a newer version I was able to decrypt contents of packets with server.key.
Lerna