On Thu, Dec 25, 2008 at 05:42:08PM -0500, Alex wrote:
> On Thu, Dec 25, 2008 at 4:49 PM, Sake Blok <sake@xxxxxxxxxx> wrote:
>
> > Just for my curiosity, what is your setup that allows you to export the
> > master secret?
>
> I wrote a small program using openssl to act as a MITM between a
> proprietary client and server (which use a proprietary protocol). My
> goal is to reverse engineer the protocol to figure out how it works.
Uhmm... if you are writing a MITM proxy between the client and the
server, aren't you terminating the SSL sessions? In that case you are
doing the decryption yourself already aren't you? Otherwise you would
not have the (pre) master secret.
Cheers,
Sake