Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I can view the certificate using
openssl s_client -showcerts -connect www.masaood.com:443 </dev/null
I can view the public key of a RSA, but cannot find any information for DHE:
openssl s_client -showcerts -connect www.masaood.com:443 </dev/null | openssl x509 -pubkey -noout
How do I view the prime number and base g of the DHE protocol in the certificate with OpenSSL or any information of the DHE shared key exchange?
I don't think you can do this with any openssl command line program. At most you might use -debug option with openssl s_client so that it shows you all the transferred data as hex and then you can try to figure out what this means. It is far easier to use Wireshark to sniff the connection and then look at all the handshake details. This gives you also the DH parameters you want to know:
Apart from Wireshark option, I found out it is possible to view the handshake protocol via OpenSSL trace option
Trace: show verbose trace output of protocol messages. OpenSSL needs to be compiled with enable-ssl-trace for this option to work.
