Decrypting SSL

[filipp]

Has anyone found a method for decrypting SSL connections on OS X? Say if you had to troubleshoot WGM or Server Monitor. Server Admin’s Debug menu is great, but only for Server Admin.

So far I’ve found that:
* ssldump won’t compile wihout some extra tinkering (mbartosh actually mentions using it one of his news posts, but the patch that he suggests doesn’t seem to help me)
* ettercap actually works, but the SSL dissecting doesn’t (or I just don’t understand how to use it…)
* wireshark is just massive and if I recall correctly, won’t install easily

I don’t use DarwinPorts or Fink, but would be willing to try them if there’s a solution.

[filipp]

Thanks.
I actually managed to get ssldump to work! Ended up changing a few lines in the configure script (.so references to .dylib etc) and removing line 52 in base/pcap_snoop.c I remember installing it through darwinports but it segfaulted on startup.

I compiled ssldump as a UB and built a pkg. Downloadable from my homepage:
http://homepage.mac.com/filipp/tarkvara/files/ssldump.zip

Haven’t tested it on Intel.

[Author]

Posts