MITM certificate could look more like actual server certificate

von / PerProxy

A python-based proxy that uses Perspectives to detect and thwart SSL MITM attacks.

7 stars 2 forks source link

MITM certificate could look more like actual server certificate #3

Open von opened 13 years ago

von commented 13 years ago

Current the certificate used by the proxy for the SSL MITM code just has the target service name in the CN. It could replicate the whole DN, subject alt name and everything else from the server certificate (except the key and serial number)

von commented 13 years ago

Taking the certificate lifetime from the site certificate would probably solve issue #22.