search

von / PerProxy

A python-based proxy that uses Perspectives to detect and thwart SSL MITM attacks.
7 stars 2 forks source link

alert bad certificate with google voice #20

Open von opened 13 years ago

von commented 13 years ago

Trying to listen to google voice mail from within gmail:

PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Checking certificate with Perspectives
PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Connection to server established
PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Responding to client.
PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Cert = /var/folders/nJ/nJWAteAfGmmL1Z+ElkLkOk+++TI/-Tmp-/tmpnz29aJ
PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Key = /var/folders/nJ/nJWAteAfGmmL1Z+ElkLkOk+++TI/-Tmp-/tmplm4qy_
PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Starting SSL with client...
PerProxy:Thread-26:mi4n4suj0tj9t9autko9s32g7lt4dp8f-a-gm-opensocial.googleusercontent.com: Error responding to client: [Errno 1] _ssl.c:499: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate

The DN is getting mangled somehow, no CN component:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306893972 (0x4de59e94)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=PerProxy CA, O=PerProxy
        Validity
            Not Before: Jun  1 02:07:10 2011 GMT
            Not After : Jun  2 02:07:10 2011 GMT
        Subject: O=My Org
       Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
  ...