Re: Looking for an open source ssl sniffer...

On Mon, Jul 21, 2003 at 09:17:41PM +0200, Philip May wrote:
> You write: I've got the keys as its my server

That's just plain silly... The public/private keys are used for a few things, but encryption of the request/response contents is not one of them...

Public/Private keys are used during the SSL session initialization to authenticate one or both of the communication endpoints. Additionally, they are used to negotiate a symetric key cipher (such as 3des) and create a shared secret key which is used for the encryption of the traffic following the SSL session init...

-visigoth

-- 
Omnis tuus capsa sunt inesse nos
____________________________________________________________________________
     Damieon Stark           | Microsoft: Where do you want to go today?
visigoth@securitycentric.com | Linux: Where do you want to go tomorrow?
     p: 612.382.6945         | FreeBSD/Sun: Are you guys coming or what?
     pgp: 0xBE5D0C57         | 
http://www.sun.com/solaris - To the Nth!
       pgp.mit.edu           | 
http://www.freebsd.org - The power to serve!
----------------------------------------------------------------------------
I'll see your DMCA and raise you a First Amendment.
http://www.anti-dmca.org
----------------------------------------------------------------------------
eot