Mike Alberghini <[EMAIL PROTECTED]> writes:

> On Wed, Nov 13, 2002 at 04:24:38PM -0300, Alejandro Rusell wrote:
> > I don't know of any option in the clients (browsers) that support
> > your scenario.
> > 
> > BTW, what do you mean with "analyze unencrypted network traffic"?
> > Should it be "encrypt/protect unencrypted network traffic"?
> 
> We have a web system that is already secured via https.
> 
> My boss wants to be able to sniff the network traffic and understand it.
> That's why we need a decrypted path.
> 
> He explained what he wanted in 3 minutes before leaving on a week of 
> vacation, so I'm kind of confused myself. :)
If you have the private key for the server, the easiest thing
to do is use ssldump (http://www.rtfm.com/ssldump). Then you
don't need a proxy, just the key and the ability to sniff.
 
-Ekr

-- 
[Eric Rescorla                                   [EMAIL PROTECTED]]
                http://www.rtfm.com/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to