Enable SSL Decryption Discovery Edition


#1

What tasks should we perform to enable SSL encryption on the Discovery Edition? We added the Private Key and PEM certificate, but somehow the SSL traffic is not decrypted. The certificate is a wildcard using TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 cipher suite. Can anyone help?


#2

Extrahop is not able to decrypt diffe-hellman cipher. Your certificate(…ECDHE…) seems to use DH algorithm.

Plz refer to Diffie-hellman support on extrahop


#3

Thnx witchcmo for the answer. So in order to decrypt, one would need to use PKCS key exchange instead of DH and ECDHE?


#4

I assme that the others will work except diffe-hellman, since DH is only mentioned as not supported.
I have an experience with RSA algorithm.