Re: Tools for tracing TLS/SSL

[Dinesh Salegame <dvs@comneti.com>]

Tony,

Thanks. I will try ethereal/ssldump. It is just that I have tried everything
(debug options, config etc..) to get the TLS/SSL to work with openldap. For
some reason the TLS/SSL handshake between the client and server fails. The
Client writes the key exchange and cipher spec but the server is not able to
read it. I want to see if these tools will help to check if the server
receives the client message or not.

thanks,
dinesh

Tony Earnshaw wrote:

> fre, 2002-08-30 kl. 20:55 skrev Dinesh Salegame:
>
> > Is there any tools for tracing SSL packets ? I am having problems
> > getting a openldap client to talk to a opnldap server using TLS/SSL.
>
> Slapd -d -1?
>
> Or what could you, as a mortal, make of the content of TLS packets?
>
> OTOH if you want to see the contents of IP packets, headers and all,
> Ethereal.
>
> Best,
>
> Tony
>
> --
>
> Tony Earnshaw
>
> The usefulness of RTFM is vastly overrated.
>
> e-post:         tonni@billy.demon.nl
> www:            http://www.billy.demon.nl
> gpg public key: http://www.billy.demon.nl/tonni.armor
>
> Telefoon:       (+31) (0)172 530428
> Mobiel:         (+31) (0)6 51153356
>
> GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
> 3BE7B981
>
>   ------------------------------------------------------------------------
>                        Name: signature.asc
>    signature.asc       Type: application/pgp-signature
>                 Description: Dette er en digitalt signert meldingsdel