I can view the certificate using

openssl s_client -showcerts -connect www.masaood.com:443 </dev/null

I can view the public key of a RSA, but cannot find any information for DHE:

openssl s_client -showcerts -connect www.masaood.com:443 </dev/null | openssl x509 -pubkey -noout

How do I view the prime number and base g of the DHE protocol in the certificate with OpenSSL or any information of the DHE shared key exchange?

2 Answers 2


I don't think you can do this with any openssl command line program. At most you might use -debug option with openssl s_client so that it shows you all the transferred data as hex and then you can try to figure out what this means. It is far easier to use Wireshark to sniff the connection and then look at all the handshake details. This gives you also the DH parameters you want to know:

enter image description here


Apart from Wireshark option, I found out it is possible to view the handshake protocol via OpenSSL trace option

Trace: show verbose trace output of protocol messages. OpenSSL needs to be compiled with enable-ssl-trace for this option to work.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .