Hello, Is there a software tool (free or proprietary) that can play man-in-the-middle and report on whether or not it sees a SSL protocol violation? The client and server are ours essentially which means we have access to the private keys and can feed them to this tool. We've seen ssldump, http://www.rtfm.com/ssldump/, but we need something a bit more robust. Specifically we need something that can tell us more about resumed sessions. http://www.mail-archive.com/openssl-users@openssl.org/msg18138.html Thanks! -Tom -- Tom Vaughan <tom at vaughan dot to> ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]