SSLsplit 0.4.6 发布,可扩展的SSL调试工具

jopen 11年前

SSLsplit支持基于IPv4和IPv6的普通TCP、普通SSL、HTTP、HTTPS的数据包拦截。为了支持SSL和HTTPS连接,它基于原始服务器的subject DN和subjectAltName扩展能够动态生成一个伪造的X509v3签名证书。SSLsplit完全支持SNI,并支持RSA、DSA和 ECDSA key、DHE以及ECDHE加密算法。

发布说明: This bugfix release fixes a bug in passthrough mode (-P) when no matching certificate is found for a connection (issue 9) and a bug in binding to ports < 1024 with default settings (issue 8). Additionally, it works around a bug in OpenSSL 1.0.0k and 1.0.1e which caused a segmentation fault when loading certificates or keys