Table of Contents
Advertisement
Syntax
The tool cannot and does not decrypt any encrypted message data. You use the tool
to look at the plain text and binary data that are part of the handshake procedure,
before the secure connection is established.
Syntax
To run SSL Debugging Tool, type this command in a command shell:
ssltap
Options
The command does not require any options other than hostname:port, but you
normally use them to control the connection interception and output. The options
for the command are the following:
Table 14-1 Description of command options
Option
Description
Print a version string for the tool.
-v
Turn on hex/ASCII printing. Instead of outputting raw data, the command interprets each
-h
record as a numbered line of hex values, followed by the same data as ASCII characters. The
two parts are separated by a vertical bar. Nonprinting characters are replaced by dots.
Turn on fancy printing. Output is printed in colored HTML. Data sent from the client to the
-f
server is in blue; the server's reply is in red. When used with looping mode, the different
connections are separated with horizontal lines. You can use this option to upload the output
into a browser.
Turn on SSL parsing and decoding. The tool does not automatically detect SSL sessions. If you
-s
are intercepting an SSL connection, use this option so that the tool can detect and decode SSL
structures.
If the tool detects a certificate chain, it saves the DER-encoded certificates into files in the
current directory. The files are named cert.0 x , where x is the sequence number of the
certificate.
If the -s option is used with -h, two separate parts are printed for each record: the plain
hex/ASCII output, and the parsed SSL output.
Turn on hex/ASCII printing of undecoded data inside parsed SSL records. Used only with the
-x
-s option. This option uses the same output format as the -h option.
116
Netscape Certificate Management System Command-Line Tools Guide • March 2002
[
] [
port] hostname:port
-vhfsxl
-p
Advertisement
Table of Contents
