Re: Decrypting the HTTPS requests

2007-01-19 Thread Dave Paris
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I typically use a SSL-terminating reverse proxy in the DMZ, like Pound,
to terminate the SSL connection at the front door and send the request
back into a private subnet over plain HTTP for IDS/IPS detection,
clicktracking, etc.

Best~
- -dsp

Nikhil Kadu wrote:
 Hi Guys,
 
 Is it possible to decrypt the encrypted data in an HTTPS request/response 
 while sitting in the Apache Proxy? Which functions of MOD_SSL and MOD_PROXY 
 modules need to be tweaked to achieve this? Please let me know if somebody 
 has done some related work.
 
 Best regards,
 Nikhil Kadu
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFFsOIOKmNPF3QynfQRAsGbAKCILyuzshFEcS2Kxec1Vqwx3BRPDgCfUWQ+
V+K12TOX32Jzmn2MszWgu2s=
=22Uk
-END PGP SIGNATURE-
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  modssl-users@modssl.org
Automated List Manager[EMAIL PROTECTED]


Decrypting the HTTPS requests

2007-01-18 Thread Nikhil Kadu
Hi Guys,

Is it possible to decrypt the encrypted data in an HTTPS request/response while 
sitting in the Apache Proxy? Which functions of MOD_SSL and MOD_PROXY modules 
need to be tweaked to achieve this? Please let me know if somebody has done 
some related work.

Best regards,
Nikhil Kadu