first is null
recordLen = %u bytes
SSLRecord { [%s]
type = %d ( change_cipher_spec)
alert)
handshake)
application_data)
version = { %d,%d }
length = %d (0x%x)
< encrypted >
warning: fatal: unknown level %d: close_notify
unexpected_message
bad_record_mac
decryption_failed
record_overflow
decompression_failure
handshake_failure
no_certificate
bad_certificate
unsupported_certificate
certificate_revoked
certificate_expired
certificate_unknown
illegal_parameter
unknown_ca
access_denied
decode_error
decrypt_error
export_restriction
protocol_version
insufficient_security
internal_error
user_canceled
no_renegotiation
unsupported_extension
certificate_unobtainable
unrecognized_name
bad_certificate_hash_value
unknown alert %d
MAC = {...}
fxhslp:
Looking up "%s"...
Host Name lookup failed
Couldn't create socket
Couldn't listen
accept timed out
Couldn't connect
Connection #%d [%s]
Connected to %s:%d
PR_Poll failed.
PR_Poll timed out.
Client socket read failed.
--> [
error on server-side socket.
<-- [
Connection %d Complete [%s]
tryLater (Try again later) unused ((4) is not used) t ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? d SSL3/DH-RSA/3DES192EDE-CBC/SHA SSL3/DHE-DSS/DES192EDE3CBC/SHA SSL3/DHE-RSA/3DES192EDE-CBC/SHA SSL3/DH-anon/3DES192EDE-CBC/SHA SSL3/FORTEZZA-DMS/FORTEZZA-CBC/SHA TLS/DH-DSS/CAMELLIA128-CBC/SHA TLS/DH-RSA/CAMELLIA128-CBC/SHA TLS/DHE-DSS/CAMELLIA128-CBC/SHA TLS/DHE-RSA/CAMELLIA128-CBC/SHA TLS/DH-ANON/CAMELLIA128-CBC/SHA TLS/RSA-EXPORT1024/RC2CBC56/MD5 TLS/RSA-EXPORT1024/DES56-CBC/SHA TLS/DHE-DSS_EXPORT1024/DES56-CBC/SHA TLS/DHE-DSS_EXPORT1024/RC4-56/SHA TLS/DHE-DSS/3DESEDE-CBC/RMD160 TLS/GOST341094/GOST28147-OFB/GOST28147 TLS/GOST34102001/GOST28147-OFB/GOST28147 TLS/GOST34102001/NULL/GOSTR3411 TLS/DH-DSS/CAMELLIA256-CBC/SHA TLS/DH-RSA/CAMELLIA256-CBC/SHA TLS/DHE-DSS/CAMELLIA256-CBC/SHA TLS/DHE-RSA/CAMELLIA256-CBC/SHA TLS/DH-ANON/CAMELLIA256-CBC/SHA TLS_EMPTY_RENEGOTIATION_INFO_SCSV TLS/ECDH-ECDSA/3DES-EDE-CBC/SHA TLS/ECDHE-ECDSA/3DES-EDE-CBC/SHA TLS/ECDHE-ECDSA/AES128-CBC/SHA TLS/ECDHE-ECDSA/AES256-CBC/SHA TLS/ECDHE-RSA/3DES-EDE-CBC/SHA TLS/ECDH-anon/3DES-EDE-CBC/SHA TLS/ECDHE-ECDSA/AES128-CBC/SHA256 TLS/ECDHE-ECDSA/AES256-CBC/SHA384 TLS/ECDH-ECDSA/AES128-CBC/SHA256 TLS/ECDH-ECDSA/AES256-CBC/SHA384 TLS/ECDHE-RSA/AES128-CBC/SHA256 TLS/ECDHE-RSA/AES256-CBC/SHA384 TLS/ECDH-RSA/AES128-CBC/SHA256 TLS/ECDH-RSA/AES256-CBC/SHA384 TLS/ECDHE-ECDSA/AES128-GCM/SHA256 TLS/ECDHE-ECDSA/AES256-GCM/SHA384 TLS/ECDHE-RSA/AES128-GCM/SHA256 TLS/ECDHE-RSA/CHACHA20-POLY1305/SHA256 TLS/ECDHE-ECDSA/CHACHA20-POLY1305/SHA256 TLS/DHE-RSA/CHACHA20-POLY1305/SHA256 SSL3/RSA-FIPS/3DES192EDE-CBC/SHA SSLTAP (C) 1997, 1998 Netscape Communications Corporation.
Usage: ssltap [-vhfsxl] [-p port] hostname:port
-v [prints version string]
-h [outputs hex instead of ASCII]
-f [turn on Fancy HTML coloring]
-s [turn on SSL decoding]
-x [turn on extra SSL hex dumps]
-p port [specify rendezvous port (default 1924)]
-l [loop - continue to wait for more connections]
assert failed - dbl->first is null
version = {0x%02x, 0x%02x}
cipher-specs-length = %d (0x%02x)
sid-length = %d (0x%02x)
challenge-length = %d (0x%02x)
cipher-suites = {
[ssl2] ClientMasterKeyV2 {
cipher-spec-chosen = (0x%06x) %s
clear-portion = %d bits
[ssl2] Client Finished V2 {...}
sid hit = {0x%02x}
[ssl2] Server Verify V2 {...}
[ssl2] Server Finished V2 {...}
[ssl2] Request Certificate V2 {...}
[ssl2] Client Certificate V2 {...}
[ssl2] UnknownType 0x%02x {...}
extensions[%d] = {
extension type %s, length [%d] client_version = {%d, %d}
contents = {...}
cipher_suites[%d] = {
*error in protocol - csuitelength shouldn't be odd*
compression[%d] = {
UNDEFINED VERSION %d.%d {...}
server_version = {%d, %d}
cipher_suite = (0x%04x) %s
compression method = (%02x) %s
ticket_lifetime_hint = %s
chainlength = %d (0x%04x)
size = %d (0x%04x)
data = { couldn't save file '%s' }
data = { saved in file '%s' }
CertificateRequest {
certificate types[%d] = { certificate_authorities[%d] = {
distinguished name [%d] verify_data = {...}
unable to decode certificate_status
Response Status: other (Status value %d out of defined range)
Unrecognized Responder ID Type
Cert is unknown to responder.
Unsuccessful response, no more information.
UNKNOWN MESSAGE TYPE %d [%d] {
[incomplete handshake message]
bad_certificate_status_response
Note: use of -f without -s or -h not recommended,
as the output looks a little strange. It may be useful, however
You must specify the host AND port you wish to connect to
Port must be a nonzero number.
SSLTAP output
PR_InitializeNetAddr(,%d,) failed with error %d
NSS_NoDB_Init() failed with error %d
Couldn't bind to port %d (error %d)
Proxy socket ready and listening
couldn't open new socket to connect to server
Exception on client-side socket.
Exception on server-side socket.
Read EOF on Client socket. [%s]
Write to server socket failed.
Short write to server socket!
Read EOF on Server socket. [%s]
Write to client socket failed.
Short write to client socket!
successful (Response has valid confirmations) malformedRequest (Illegal confirmation request) internalError (Internal error in issuer) sigRequired (Must sign the request) unauthorized (Request unauthorized) T4 (P] ] ] ] ] ] ] P8] ] ] `]
.E E E E E E E . E E E >E
.)))))))))-)))))))))---)))))))h-)))))))))H-(--,,,,h,H,(,,+))))))))+)))))))))++))))))))h+)))))))))H+)))))))))(+)))))))))+****0x MD2 MD4 SHA1 SHA224 SHA384 SHA512 %s: (empty)
%02x: %c %s: (null)
%s: %d (0x%x)
%s: : error %d function failed %s
: error %d
%s [Len: %d]
0123456789abcdef ................................ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~................................................................................................................................. c P256 P384 P521 x25519 FF2048 FF3072 FF4096 FF6144 FF8192 , ssl3 tls1.0 tls1.1 tls1.2 tls1.3 -----END CRL----- -----BEGIN CRL----- %s
%s
%s
PROBLEM WITH THE CERT CHAIN:
ERROR %ld: %s
[Certificate Authority] CERT %d. %s %s:
Email Address(es): Cert cannot sign other certs. Cert cannot sign. [unknown usage]. Cert cannot be used for SSL. %s
Cert cannot encrypt. Terminal Record
Trusted
Warn When Sending
Valid CA
Netscape Trusted CA
User
Trusted Client CA
Step-up
SSL Flags:
Email Flags:
Object Signing Flags:
Boolean False True %s: %s
" Prime Subprime Base PublicValue Modulus Exponent Error: INVALID RSA KEY!
%s%s %s/%s !Invalid AVA! (empty) Parsing extension Error Subject Issuer Issuer DER Base64:
Serial DER Base64:
\x%02x " }
%a %b %d %H:%M:%S %Y %s: [%d] [%d]
%s: NULL
Set Sequence %s{
(encoded) Value (%d)%s PRIVATE KEY -----BEGIN -----END error converting der (%s)
HOME .netscape %.900s%s %.900s/%s %.900s SSL_DIR Enter new password: Re-enter password: external Invalid password.
Failed to change password.
Out of memory
Salt Iteration Count %s (SHA-256): %s (SHA1): Hash algorithm Mask algorithm Mask hash algorithm Salt length Invalid RSA-PSS parameters
Key Length KDF algorithm Parameters Encryption MAC Args Signature Algorithm Fingerprint true (attribute present) false (attribute present) false (attribute missing) Mozilla-CA-Policy: %s
Certificate Trust Flags Key Encryption Algorithm Encrypted Key KDF Cipher Digest Algorithm Authenticated Attributes:
Attribute (%d) Digest Encryption Algorithm Encrypted Digest Unauthenticated Attributes:
Attribute (%x) (NULL) %-60s %-5s
Encrypted Content Information Unknown Content Type: %s
Content Encryption Algorithm Encrypted Content Validity Not Before Not After Raw Subject Public Key Info Public Key Algorithm RSA Public Key DSA Public Key EC Public Key Curve unknown SPKI algorithm type
Parsing public key %s:
Other Name OID Directory Name RFC822 Name DNS name URI IP Address Registered ID X400 Address EDI Party unknown type [%d] %s Subtree:
Minimum Maximum Digital Signature Critical URL Comment ServerName %c%s none
Is not a CA.
Usages: (none)
Allocating new ArenaPool Key ID RDN Point Reasons CRL issuer Permitted Excluded Method Error: missing method
Location Distribution point:
Attribute Type Attribute Values Attributes Entry %d (0x%x):
Revocation Date Entry Extensions CRL Extensions
Digest Algorithm List:
Digest Algorithm (%x) Certificate List:
Certificate (%x) Signed Revocation Lists:
Signed Revocation List (%x) Certificate Revocation List Signer Information List:
Signer Information (%x) Recipient Information List:
Recipient Information (%x) Issuer Unique ID Subject Unique ID Signed Extensions SSL Client SSL Server S/MIME Object Signing Reserved SSL CA S/MIME CA ObjectSigning CA Non-Repudiation Key Encipherment Data Encipherment Key Agreement Certificate Signing CRL Signing Encipher Only Decipher Only Cert cannot be used for SMIME. Cert cannot be used as an SSL CA. Cert cannot be used as an SMIME CA. Cert cannot be used for object signing. Cert cannot be used as an object signing CA. (%d least significant bits unused)
Serial DER as C source:
{ %d, " unable to read data from input file
Warning: ignoring private key. Consider to use pk12util.
input has header but no trailer
error converting ascii to binary (%s)
Error opening input terminal for read
Error opening output terminal for write
No password file "%s" exists.
password file contains no data
Enter a password which will be used to encrypt your keys.
The password should be at least %d characters long,
and should consist of at least three character classes.
The available character classes are: digits (0-9), ASCII
lowercase letters, ASCII uppercase letters, ASCII
non-alphanumeric characters, and non-ASCII characters.
If an ASCII uppercase letter appears at the beginning of
the password, it is not counted toward its character class.
Similarly, if a digit appears at the end of the password,
it is not counted toward its character class.
Enter a password which will be used to encrypt your keys.
The password should be at least 8 characters long,
and should contain at least one non-alphabetic character.
Passwords do not match. Try again.
Incorrect password/PIN entered.
Enter Password or Pin for "%s": Press Enter, then enter PIN for "%s" on external device.
Password check failed: No password found.
Invalid password. Try again.
Password changed successfully.
Hash algorithm: default, SHA-1
Mask algorithm: default, MGF1
Mask hash algorithm: default, SHA-1
Invalid mask generation algorithm parameters
Salt length: default, %i (0x%2X)
unable to format this SPKI algorithm type
Is a CA with a maximum path length of %d.
Is a CA with no maximum path length.
)]``r_>_
_^)])])]`)]^)])])]^^)]^^)]^^^)]^)]T^)]] ȌȌȌ|$Dd\$ttĘtttlTtttttttttttttttttttttttttttttttttttttttttttttttttttttttttttp non-alphabetic characters
Password must be at least 8 characters long with one or more
Policy Name Policy Qualifier Name Error: missing qualifier
Display Text Policy Qualifier Data Invalid Policy Data Error: notBefore or notAfter MUST be present.
8 ;, 0H ` @x p p P ` @ P 0 P P @ p ( ` p p! p" "( &x & ' P*@
,h
-
.
. /( 1X @2x 3 6 6 6( 6@ 7` 9 : `;
;(
?
A Ch D E G HH Hp I I K( 0LP Lx M @N N P P8 QP Q R U @V V8 W` W PX ] P^ 0`h P` a @d @e `f@ g` h Pj `l0 nX Pp `p q pt0 w` x Pz { { {( ~X ~ 0 ` @ P P ( Ph `( P @ ` p 0 H x @ P zR x 4 Xs L . d D$ | LN
K x) D 2 X0t 8Z N
C L x BEE B(D0A8D@i
8D0A(B BBBE d s AG iA$ HO AG I
AN XA p; AD tA 4 ^ MZ@x
I P
H J
F Dh
D L $ xv BBB E(A0A8DpU
8A0A(B BBBA L t BBE E(A0D8DPH
8D0A(B BBBD L BBB B(I0A8G
8A0A(B BBBG d q BBB E(A0C8Gp
8A0A(B BBBE 3
8A0A(B BBBK L |
t BBB B(A0A8L
8A0A(B BBBH 4 ADD f
AAG NFA , 4 8 BDG Y
ABG 4 d L AAG
AAK
AAA $ MS0 x Da
K X0 L p BBE E(A0A8GP:
8C0A(B BBBA L 0 , d 8 2 BFC cAB | H ? BBE E(D0A8GPs
8D0A(B BBBF I
8K0A(B BBBS
8A0A(B BBBB $ MV`
E < < ! BBA A(J
(A ABBF $ | P" ML@
D 4 8# ADI@V
AAJ L
AAB #
Y , $ hQ
G , & Q`
G , L &k KaQ
B L | (E BPL B(D0K8D
8A0A(B BBBA * ) )S 8*] A`
G L 4 x+' BBE B(A0D8G@
8A0A(B BBBH $ X, MI B
H $ 0-D b@q
E $ X.n MNPR < . BBA A(D@
(D ABBA , < / MMNpc
E $ l / MNPW
F , 80 MMN`
B $ 1 MN@q
D L 2 BBB E(D0A8G@K
8A0A(B BBBD L <
@5 BBE E(D0D8D8A0A(B BBB $
5s MNPW <
86 BHD E
ABJ L
PBJ $
7 MMD0 $ 8 MI i
I $ D 89p MNPT $ l 9 MI@r
H d : BBB E(D0D8GP*
8A0A(B BBBB D
8D0A(B BBBO $ p; MNPM
H $ $ ; MP0 $ L p< MP0u
F } $ t (=p MNPT p=h MD V $ =h MI
G $ ? MVP~
G
? , $
? OMSPv
K T
X@. D0i L l
p@ BBE H(A0I8DPi
8D0A(B BBBK $
0C MV0{
B $
(Dp MNPT $ pD MML`
B 4 (EQ MI0z T hEQ MI0z , t Ec M^u
H 4 J BAD G0~
CABF \ @K BED A(Gpy
(A ABBF D
(A ABBF e(A ABB < L L T L BEB B(D0C8Jk
8A0A(B BBBA $ NG MN`
A $ @P MMLPs
G Q G
F R AW
H $ 4 R OU e
G $ \ pSM M[Pi
G | U BBB B(A0A8D@s
8D0A(B BBBB H
8A0A(B BBBE H
8A0A(B BBBE $ (W ML
B D , X" BAA G@5
CABA D
CABG t Z
$ Z. MMQ
F L [ BBE B(D0A8G
8A0A(B BBBG , 8^ MMQO
F $ 4 `^ MMQ
F D \ a MN0s
J D
L p
H k
E k
E C $ xc~ M]`
G d d , d MMNg
A $ , f MP0 $ T hg. MMQ
F L | phW BEB B(A0F8J+
8A0A(B BBBA 4 jY BDA G`
AABJ , k BDD
ABT 4 Hl MK l $ T l M]P
J $ | `n; MMKPS
H , xp OMV
G $ HqO LY
J < pt BBE I(C0(A BBB L < t BBB B(A0D8G0
8A0A(B BBBB , 0 MMSP
C < Ѐ BBD A(G@F
(C ABBB $ 0 Z w
O c < $ G BBE D(C0m(C BBB , d Z OMSPy
H L D BEB G(D0D8J
8A0A(B BBBF L BBB E(H0F8J
8A0A(B BBBE $ 4 bD@m , \ MMMDP
D $ M]P
J 8 0L AA
F C, `5 WQ
A , pF M]@
N n
J L L + BBB B(D0D8G
8A0A(B BBBG p $ h Q_@X ZA [A @[A GA GA p[A [A kA kA lA lA lA lA 'lA 1lA EiA BlA RlA clA ulA lA lA lA lA a ( ! `xA 0 x x H A M ) J U `<@
/A o @ @ X@
3 a ,@ @)@ H o '@ o o &@ a <@ <@ <@ <@ <@ <@ <@ <@ =@ =@ .=@ >=@ N=@ ^=@ n=@ ~=@ =@ =@ =@ =@ =@ =@ =@ =@ >@ >@ .>@ >>@ N>@ ^>@ n>@ ~>@ >@ >@ >@ >@ >@ >@ >@ >@ ?@ ?@ .?@ >?@ N?@ ^?@ n?@ ~?@ ?@ ?@ ?@ ?@ ?@ ?@ ?@ ?@ @@ @@ .@@ >@@ N@@ ^@@ n@@ ~@@ @@ @@ @@ @@ @@ @@ @@ @@ A@ A@ .A@ >A@ NA@ ^A@ nA@ ~A@ A@ A@ A@ A@ A@ A@ A@ A@ B@ B@ .B@ >B@ NB@ ^B@ nB@ ~B@ B@ B@ B@ B@ B@ B@ B@ B@ C@ C@ .C@ >C@ NC@ ^C@ nC@ ~C@ C@ C@ C@ C@ C@ C@ C@ C@ D@ D@ .D@ >D@ ND@ ^D@ nD@ ~D@ D@ D@ D@ D@ D@ D@ D@ D@ E@ E@ .E@ >E@ NE@ ^E@ nE@ ~E@ E@ E@ E@ E@ E@ E@ E@ E@ F@ F@ .F@ >F@ NF@ ^F@ nF@ ~F@ F@ F@ F@ F@ F@ F@ F@ F@ G@ ^A /dev/tty ssltap.debug `lT .shstrtab .interp .note.ABI-tag .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink 8@ 8 T@ T ! t@ t $ 4 o @ > X@ X F @ 3 N o &@ & [ o '@ ' j @)@ @) H t ,@ , ~ `<@ `< y x<@ x<
G@ G /A / 0A 0 H xA x , }A } a Йa Й a a a 0 a a ` Ha H a h P h |