oweiler
Is there a way to decrypt an openvpn stream of packets (I have a pcap formatted capture file) where the OpenVPN server uses UDP port 1194? I have both the server and the client private key. I tried opening the pcap file using wireshark and then put in server private key in the RSA keys list under preferences -> protocols -> SSL. I don't care much about proper decoding as once I get a set of packets in cleartext, I can do that by hand (it's mostly HTTP traffic).
I have to believe this is possible given that I have both private keys but I haven't found any examples of doing this with OpenVPN traffic, only with HTTPS traffic.
Any help would be greatly appreciated.
Oliver Weiler
ojw at auto-graphics.com
janjust
if this were possible I would immediately stop using OpenVPN; in client/server mode OpenVPN negotiates perfect forwarding secrecry using temporary epheremal keys, making impossible to decrypt a session unless you know the epheremal keys.
