On Sat, Aug 29, 2009 at 12:09:18AM -0700, Rene Hollan wrote:
>
> Right, that's what I figured. Trouble is, if I chose TO proxy, they I
> must have my peer to the remote server act as if it sent the same client
> hello so as to have the same challenge bytes. AFAIK, there is no openssl
> mechanism to set this prior to sending a client hello.
OpenSSL is not intended to be a toolkit for writing MITM proxies
(that may be) able to get out of the way (stop decrypting and re-encrypting
and just act as a TCP proxy) of kRSA sessions.
Why the need to step down to "TCP proxy"? Are CPU cycles too scarce to
encrypt at wire rates?
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
