301B: BIG-IP LTM Specialist: Maintain and TroubleshootDemo

By F5 · Question Mode

QuestionQ73

Troubleshoot Basic Virtual Server Connectivity Issues

An LTM Specialist has just captured the trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443, configured in partition ApplicationA. The captured data payload is SSL-encrypted.

Which command should the LTM Specialist run to decrypt the data payload?

  • A ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1
  • B ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1
  • C ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1
  • D ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.key_1
Explanation

SSL/TLS payload decryption with ssldump -k requires the server’s private key. For an object in the ApplicationA partition, the BIG-IP filestore location uses ApplicationA_d/certificate_key_d and the partition-qualified key filename, rather than a certificate file or a key in Common.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!