RE: OCSP sniffing

[<benoni.martin () accenture com>]

Hi !

Sniffing with wireshark, you should see the OCSP request & response, but
the data field will not be displayed (the dissector has not been
implemented yet).

But you can test the connection with openssl, you should see the
response (OK, revoked, ...)

Regards.

PS: BTW, no reply about this topic from list :(


-----Original Message-----
From: mgk.mailing [mailto:mgk.mailing () googlemail com] 
Sent: 04 March 2008 16:03
To: Martin, Benoni
Cc: security-basics () securityfocus com
Subject: Re: OCSP sniffing

Did you get any further in this?  i am looking to implement ocsp on some
security devices and am wondering what could be sniffed via the
connection.

cheers

/Mgk

benoni.martin () accenture com wrote:
> Hi list,
>
> Anyone knows a current free sniffer supporting the adequate decoders 
> to diaplay OCSP trafic?
>
> I've tried wireshark, but the dissector does not seem yet to be 
> implemented ...
>
> Thanks !
>
>
> This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information.  If you have
received it in error, please notify the sender immediately and delete
the original.  Any other use of the email by you is prohibited.
>   



This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private 
information.  If you have received it in error, please notify the sender immediately and delete the original.  Any 
other use of the email by you is prohibited.