Hello, je reviens avec une question sur jabberd.
Entre mon client PSI et mon serveur jabberd, j'utilise ssl pour securiser
le transfert des donnees. Mais je me demande comment determiner avec
tcpdump (par exemple) quel algorithme de chiffrement est en fonction et la
taille de la clef de session.
J'ai teste avec SSLdump et l'ouput est ci-dessous. Comment obtenir reponse
a ma question?
Merci!
Bogomips
[EMAIL PROTECTED]:~ % ssldump -AN
New TCP connection #1: bel202-17-149-26.colt.be(46917) <-> host(5223)
1 1 2.0776 (2.0776) C>S SSLv2 compatible client hello
Version 3.1
cipher suites
Unknown value 0x39
Unknown value 0x38
Unknown value 0x35
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
SSL2_CK_3DES
Unknown value 0x33
Unknown value 0x32
Unknown value 0x2f
TLS_RSA_WITH_IDEA_CBC_SHA
SSL2_CK_IDEA
SSL2_CK_RC2
TLS_DHE_DSS_WITH_RC4_128_SHA
TLS_RSA_WITH_RC4_128_SHA
TLS_RSA_WITH_RC4_128_MD5
SSL2_CK_RC4
SSL2_CK_RC464
TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5
TLS_DHE_RSA_WITH_DES_CBC_SHA
TLS_DHE_DSS_WITH_DES_CBC_SHA
TLS_RSA_WITH_DES_CBC_SHA
SSL2_CK_DES
TLS_DHE_DSS_WITH_RC2_56_CBC_SHA
TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
TLS_RSA_EXPORT1024_WITH_RC4_56_MD5
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSL2_CK_RC2_EXPORT40
TLS_RSA_EXPORT_WITH_RC4_40_MD5
SSL2_CK_RC4_EXPORT40
1 2 2.0790 (0.0013) S>CV3.1(74) Handshake
ServerHello
Version 3.1
random[32]=
3f fa d8 3e fc aa 6f c4 17 c3 ac e0 bd 1e 13 a3
76 08 39 6d de b7 aa ec e8 a8 a8 d2 d8 f4 ad 7e
session_id[32]=
af 95 a0 30 36 2c d2 cb cd 06 77 e0 a7 b2 bc 75
36 07 bc 19 4b 8d 40 60 a4 aa 2b 8a 88 d6 d0 0d
cipherSuite Unknown value 0x35
compressionMethod NULL
1 3 2.0790 (0.0000) S>CV3.1(993) Handshake
Certificate
Subject
C=BE
ST=Bruxelles
L=Bruxelles
O=Something
OU=Own IT Dept
CN=Admin
[EMAIL PROTECTED]
Issuer
C=BE
ST=Bruxelles
L=Bruxelles
O=something
OU=Own IT Dept
CN=Admin
[EMAIL PROTECTED]
Serial 00
Extensions
Extension: X509v3 Subject Key Identifier
Extension: X509v3 Authority Key Identifier
Extension: X509v3 Basic Constraints
1 4 2.0790 (0.0000) S>CV3.1(4) Handshake
ServerHelloDone
1 5 2.2963 (0.2172) C>SV3.1(134) Handshake
ClientKeyExchange
1 6 2.2963 (0.0000) C>SV3.1(1) ChangeCipherSpec
[...]
_______________________________________________________
Linux Mailing List - http://www.unixtech.be
Subscribe/Unsubscribe: http://www.unixtech.be/mailman/listinfo/linux
Archives: http://www.mail-archive.com/[EMAIL PROTECTED]
IRC: chat.unixtech.be:6667 - #unixtech
