I'm currently a student doing some research into the Heartbleed Vulnerability and I'm having difficulty retrieving the correct RSA private keys.

Here is my setup environment in VirtualBox:

  1. Kali Linux 2.0 Host Only Network with ip address
  2. Turnkey OpenLDAP Server Host Only Network with ip address

The openLDAP server is using OpenSSL version 1.0.1e and I have managed to get usernames and passwords of users when they login using HTTPS.

However in my Kali 2.0 when I run the heartleech program

root@kali~#heartleech -a

it returns an RSA private key. I then run Wireshark to generate some traffic (logging in and out as a user in the web browser I manage to get an encrypted alert and when I add the RSA key that heartleech produced it still does not decrypt the traffic.

What I was wondering is, where do you suppose this key is being generated from? As I cannot find this key on my OpenLDAP Server, any suggestions or a point in the right direction would be much appreciated.

  • You are really asking where could an RSA key come from in a OpenLDAP server?
    – Stone True
    Commented Nov 21, 2015 at 16:03

1 Answer 1


Forward secrecy?

After the fact decryption will not work if client and server have negotiated a forward secure cipher suite. (Anything with DHE or ECDHE in the name.)

Check with WireShark. Selected suite name is in clear text.

Does key match cert?

Check if key and cert belong together.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .