This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Decrypt Webadmin Traffic(username/password)

Hi All

I am trying to use wireshark to decrypt the webadmin username/password.

I am using the private webadmin key located: /var/chroot-httpd/etc/httpd/WebAdminKey.pem

However, when selecting the key ,it seems the wireshark traffic is not decrypted . Is that the correct key to use?

Thanks

This thread was automatically locked due to age.

Parents

0 wingman over 13 years ago

Thanks Barry

If the Private key is correct I should be able to decrypt the traffic. I am not sure whether this is the location of the webadmin private key

Sent from my iPhone using Astaro.org
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 wingman over 13 years ago

Thanks Barry

If the Private key is correct I should be able to decrypt the traffic. I am not sure whether this is the location of the webadmin private key

Sent from my iPhone using Astaro.org
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 ulmi over 13 years ago in reply to wingman

Thanks Barry

If the Private key is correct I should be able to decrypt the traffic.

This is not necessarily true, depending on which cipher is being used.
See https://en.wikipedia.org/wiki/Perfect_forward_secrecy
(Also, wireshark does not support all ciphers)

In Firefox you can configure the used ciphers under about:config->security.ssl*
You should deactivate everything with the letters dhe, dh or camellia.
Cancel
Vote Up 0 Vote Down

Cancel