Forum Discussion
lleyton_266811
Nimbostratus
Nimbostratusunable to decrypt SSL traffic using private key
Hello Experts,
I have a simple F5 LTM lab using Virtual Edition Lab License (F5-BIG-VE-LAB-LIC).
Diagram: Client<--->F5<--->Server.
Setup: SSL offload on the LTM. SSL access is workin...
Kevin_Stewart
Employee
EmployeeIf that's the cipher string in the SERVERHELLO message, then you are indeed doing an RSA key exchange. So then I guess the next question is how are you doing the SSLDUMP? You have to start capturing at the beginning of a new SSL session, as a resumption or renegotiation will be encrypted with keys that you won't have. Try this:
ssldump -AdNn -i [VLAN or interface] -k [path to private key] port 443 [and any additional filters]
Does the private key require a passphrase? Do you get an error when you try to capture, or just not see any plaintext?
