On 11/12/2010 8:59 AM, Gerrard Geldenhuis wrote:
I am trying to decrypt SSL traffic capture with tcpdump in wireshark.
A quick google turned up a page that said the NSS utils does not allow
you to expose your private key. Is there different way or howto that
anyone can share to help decrypt SSL encrypted traffic for 389?
I think you're confused about the private key : you had to have had the
private key in order to configure it in the server.
So find the file, and feed that to Wireshark. Note that WS can not
currently decrypt certain ciphers (and it won't simply tell you that it
can't -- instead you waste days of your time before the penny drops).
Hopefully your client is not negotiating one of those.