For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lleyton_266811's avatar
lleyton_266811
Icon for Nimbostratus rankNimbostratus
Jun 20, 2016

unable to decrypt SSL traffic using private key

Hello Experts,   I have a simple F5 LTM lab using Virtual Edition Lab License (F5-BIG-VE-LAB-LIC).   Diagram: Client<--->F5<--->Server.   Setup: SSL offload on the LTM. SSL access is workin...
application delivery
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 22, 2016

Okay, so a few things:

  1. I'm assuming you did, but asking to make sure, did you substitute the bracketed values in that command with real values? Here's another example:

    ssldump -AdNn -i 0.0 -k mykey.key port 443

  2. As I mentioned earlier, you have to get in front of a new SSL session. Renegotiations and resumptions will be encrypted with a symmetric key that you won't have.

  3. The private key you're using here has to be the same one you're using in the client SSL profile, which I'm also assuming is RSA-based.