<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7036.0">
<TITLE>Using ssldump to decrypt SIP TLS messages</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">Hi,</FONT>
</P>
<UL>
<P><FONT SIZE=2 FACE="Arial">I try to use ssldump in order to decrypt SIP TLS messages but without any success for the moment …</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">TLS configuration in my "openser.cfg" is as follow:</FONT>
<UL>
<P><FONT SIZE=2 FACE="Arial">disable_tls = 0</FONT>
<BR><FONT SIZE=2 FACE="Arial">tls_method = TLSv1</FONT>
<BR><FONT SIZE=2 FACE="Arial">tls_certificate = "/etc/openser/user-cert.pem"</FONT>
<BR><FONT SIZE=2 FACE="Arial">tls_private_key = "/etc/openser/user-privkey.pem"</FONT>
</P>
</UL>
<P><FONT SIZE=2 FACE="Arial">I'm using ssldump with these options:</FONT>
<UL>
<P><FONT SIZE=2 FACE="Arial">ssldump -Adx -k /etc/openser/user-privkey.pem -i eth0 port 5061</FONT>
</P>
</UL>
<P><FONT SIZE=2 FACE="Arial">But application data (cf. attached file) are always encrypted … </FONT>
<BR><FONT SIZE=2 FACE="Arial">What i'm doing wrong ? I tryed to use the certificate used by the client device too with the same result ...</FONT>
</P>
</UL>
<P><FONT SIZE=2 FACE="Arial">Thanks,</FONT>
<BR><FONT SIZE=2 FACE="Arial">Christophe</FONT>
</P>
<P><FONT FACE="Arial" SIZE=2 COLOR="#000000"> <<...>> </FONT>
</P>
</BODY>
</HTML>