From d931120107e7429a689a8350d5e49c1f1147316f Mon Sep 17 00:00:00 2001
From: Peter Wu <peter@lekensteyn.nl>
Date: Sat, 31 Jan 2015 04:08:47 +0100
Subject: Add ldap-ssl.pcapng

Pre-master keys are available in the capture file comments.

Install slapd 2.4.31-1+nmu2ubuntu8 ldap-utils 2.4.31-1+nmu2ubuntu8

    cd /etc/ldap/ssl
    openssl req -newkey rsa:1024 -x509 -nodes -out slapd.pem -keyout \
        slapd.pem -days 3650 -subj /CN='LDAP SSL test/'
    chown openldap: slapd.pem && chmod 600 slapd.pem
    cat <<EOF | ldapmodify -Y EXTERNAL -H ldapi:///
    dn: cn=config
    add: olcTLSCertificateFile
    olcTLSCertificateFile: /etc/ldap/ssl/slapd.pem
    -
    add: olcTLSCertificateKeyFile
    olcTLSCertificateKeyFile: /etc/ldap/ssl/slapd.pem
    EOF
    /etc/init.d/slapd restart

Client:

    gdb -q -ex break\ gnutls_handshake -ex r --args \
        ldapsearch -ZZ ldap://127.0.0.1:389
    p session
    p/x ((gnutls_session_t)$1)->security_parameters->client_random
    p/x ((gnutls_session_t)$1)->security_parameters->master_secret
    c
---
 tls/ldap-ssl.pcapng | Bin 0 -> 8488 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 tls/ldap-ssl.pcapng

(limited to 'tls/ldap-ssl.pcapng')

diff --git a/tls/ldap-ssl.pcapng b/tls/ldap-ssl.pcapng
new file mode 100644
index 0000000..f2129f3
Binary files /dev/null and b/tls/ldap-ssl.pcapng differ
-- 
cgit v1.2.1