stunnel is also a nice way to debug ssl connections when you only control one side of the connection: http://www.stunnel.org/examples/ http://www.stunnel.org/ex

stunnel is also a nice way to debug ssl connections when you only control one side of the connection: http://www.stunnel.org/examples/ http://www.stunnel.org/examples/ As a client, you would stunnel local:389 to remote:636. As a server you would stunnel local:636 to local:389. Then you can sniff on the unencrypted port with wireshark,etc. Thanks for the pointer to detours.