Groups | Blog | Home
all groups > iis security > july 2005 >

iis security : Trace SSL Handshake


Mat Kramer
7/29/2005 9:06:41 AM
Hi all,

Is there any way to trace the SSL handshake, or to programmatically
intercept some of the results. I'm interested in determining what cipher
suite was negotiated for a given connection. Similar to what you can see
under IE File Properties when you have a secure connection, for example
"Connection: TLS 1.0, RC4 with 128 bit encryption (High); RSA with 1024 bit
exchange".

I am running a C# .NET web service and a C# web client.

Thanks

-Mat



----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
Miha Pihler [MVP]
7/30/2005 12:00:00 AM
Hi Mat,

Try SSL Diagnostics tool. You can get it here
http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en.

I hope it helps you out.

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

Mat Kramer
8/1/2005 12:37:22 PM
Mike,

Thanks for the help. I've tried the MS tool you suggested. It lets me
trace some information about incoming client certificates, but as far as I
can tell it doesn't let me know the negotiated ciper suite, and it doesn't
show any detailed information explaining why a certificate is rejected.

-Mat

[quoted text, click to view]



----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
AddThis Social Bookmark Button