Re: SSL, how to tell if it was setup correctly.

From: S. Pidgorny [MVP] (slavickp@yahoo.com)
Date: 04/09/03 

From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
Date: Wed, 9 Apr 2003 20:07:17 +1000

Use a protocol analyser like MS NetMon to capture traffic between a client
and the SSL-secured server. Meaningless rubbis should be all you get, which
means SSL works.

An SSL certificate can be used regrdless of it's being issued by a trusted
CA or not - the CA certificate is used for key signing and trust, whereas
encryption is facilitated by the server's own private key. Read any
encryption tutorial for details. 

-- 
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-
"Gabe Matteson" <gmatteson@cox.net> wrote in message
news:OFEhNXl$CHA.1776@TK2MSFTNGP10.phx.gbl...
> Hello,
>     I have just setup SSL using Microsofts CA, and am trying to use it to
> secure outlook web access. its all setup and working fine, but how do i
know
> if its "really" encrypting the communication and really working? besides
> sniffing the traffic? is that the only way? also, if the users dont have
the
> CA certificate which is the public certificate i assume on their machines
> under "trusted root certificates" they recieve a dialog box asking them to
> accept the certificate., how is the session encrypted if they dont have
that
> certificate on their machine even when they hit ok? can someone explain
this
> to me? thank you.
> - gabe matteson
>
>

Relevant Pages