Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I have to analyze SSL encryption in my test network and want to prove the transported data is encrypted. What methods can I use to prove encryption is in place?

share|improve this question
2  
For beginners, Wireshark is great for network analysis of any sort. Wireshark.org – Henning Klevjer Oct 16 '12 at 19:43

2 Answers

up vote 1 down vote accepted

Another tool that will help ensure that you have correctly setup your SSL option is sslyze (Available here) which will test your configuration to ensure that you are using the best encryption algorithms available and that you do not allow re-negotiation to weaker algorithms, thereby negating all the hard work of checking that you are encrypting data in the first place.

share|improve this answer
1  
Agreed. I always think it's best to use a different vendor's product when testing something. That way one vendor can't report something is OK based only on their own internal ideas about correctness. Involving an independent tool gives some assurance that the published standard is being met. – John Deters Oct 16 '12 at 19:41
up vote 1 down vote

If you just want to see that a SSL handshake occurs, just use a network monitor tool, like the aptly named Network Monitor from Microsoft. It will show you the details of the SSL handshake (see this answer for some details on the SSL handshake). Of course, at some point, data encryption begins, and you will then only see "encrypted application data", which is what you wanted.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.