Hello,

on 08/01/2011 05:23 AM Andreas Krey said the following:
On Mon, 01 Aug 2011 04:20:07 +0000, Manuel Lemos wrote:
...
Been there, tried that, but wireshark does not decrypt SSL traffic
unless you have the server SSL key, which is not the case because the
server is not under my control.

You can man-in-the-middle yourself to see that is going on on the wire.
A bit of openssl/stunnel.

I am not familiar with that technique. Do you recommend any articles to learn about it?


Also, the actual traffic within the SSL session should be the same as
for http (modulo things like secure cookies).

Yes, but the SubVersion servers in question do not seem to provide non-SSL versions.

--

Regards,
Manuel Lemos

JS Classes - Free ready to use OOP components written in JavaScript
http://www.jsclasses.org/

Reply via email to