Re: Packet Sniffer that can decrypt SSL on the fly?
Re: Packet Sniffer that can decrypt SSL on the fly?
- Subject: Re: Packet Sniffer that can decrypt SSL on the fly?
- From: Andreas Fink <email@hidden>
- Date: Wed, 13 Jun 2012 22:09:04 -0700
The answer to this is simply wireshark. (www.wireshark.org). It runs well under MacOS X (in a X window) and it can decode about every protocol I can imagine which is somewhat standardized.
Of course you need the SSL keys to be able to decrypt. Otherwise the whole SSL encryption would be totally useless.
Another way would be to force SSL to use "cleartext" (no-encryption) for debugging but that requires support from the source I guess. Some other guru's (as Siri calls them) on this list might for sure know that
On 13.06.2012, at 22:02, Eli Bach2 wrote:
> [resent to list, instead of just to Jerry]
>
> On Jun 13, 2012, at 10:41 PM, Jerry Krinock wrote:
>
>> I may be dreaming, but a year or so ago, I think it was on this list, someone recommended to me a Mac OS X packet sniffer app which had the unique ability of decrypting SSL traffic on the fly. I used it successfully to solve a problem, and was greatly impressed.
>>
>> But I'll be damned; I can't find any notes, messages, or app anywhere. Does anyone know the app I'm looking for?
>>
>> Thanks,
>>
>> Jerry Krinock
>
> Um, unless it used some kind of MITD method of connecting to the stream, or the stream used EXTREMELY weak encryption, I'm really hoping you are delusional. It better not be as trivial as just using a packet sniffer to be able to decrypt SSL traffic.
>
> Eli
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Macnetworkprog mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden