My goal is to be able to access an arbitrary https website on
http://localhost:3000

>From the examples I'm finding online it seems simple enough:

socat TCP-LISTEN:3000,bind=localhost OPENSSL:coolaj86.com:443

But then when I test I get

curl http://localhost:3000
curl: (56) Recv failure: Connection reset by peer

And back in the console for socat I see

2015/08/18 01:20:18 socat[15346.1995730944] E SSL_connect():
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
failed




I've tried adding more options like
socat TCP-LISTEN:3000,bind=localhost OPENSSL:coolaj86.com:443,commonname=
coolaj86.com,cafile=./coolaj86.com.root.pem

(here's the chain https://gist.github.com/coolaj86/327cee3eee6fc119b389)

But still no dice. Any ideas why it fails certificate validation?


(my actual end goal is a little more complex than that, but if I can get
this far, I think I'll figure out the rest)

AJ ONeal

/*
PLUG: http://plug.org, #utah on irc.freenode.net
Unsubscribe: http://plug.org/mailman/options/plug
Don't fear the penguin.
*/

Reply via email to