Security

Ask something
Discussion Locked

Apache SECURITY using SSL 3.0

0 helpful
4 replies

by johnny_ontiveros 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Does anyone work with Apache web server using SSL 3.0? I'm working a case where a person breached the security on a web server and we are trying to find the computer used in the crime.
Q: are the client certificate keys or thumb print numbers stored on the Apache log or does the SSL use it's own log files.

Q: Does the cookie placed on the client's computer contain all the time and date stamp of the last transaction between the client and the web server.

Q: I have to prove the case by pin pointing the exact computer used.

4 replies

by eperrin

If you have a date and time stamp that the intrusion occurred then track it through the apache access logs, the cookie and the SSL logs, all of which will be stored in places according to your system architecture. Do you have a date and time that you believe the intrusion occurred. What did this person do. Reply to eperrin@bigorbit.com if you want to discuss off this list.

This discussion is closed to new replies.