Ask Your Question

Revision history [back]

To decrypt TLS using the server's private key, you have to restrict the algorithms that can be used to those with an RSA Key exchange. This can be done at the server, by limiting the algorithms offered, or at the client by limiting the algorithms that can be chosen. How do that is a matter for the software you are using at either end.

See the Wiki page on SSL (sic) for a complete walkthough on decryption. Note that the test openssl server has the cipher set to AES256-SHA to restrict the algorithm used.

To decrypt TLS using the server's private key, you have to restrict the algorithms that can be used to those with an RSA Key exchange. This can be done at the server, by limiting the algorithms offered, accepted, or at the client by limiting the algorithms that can be chosen. are offered. How do that is a matter for the software you are using at either end.

See the Wiki page on SSL (sic) for a complete walkthough on decryption. Note that the test openssl server has the cipher set to AES256-SHA to restrict the algorithm used.