Generic SSL/TLS Proxy [Question] about scapy-ssl_tls

[tintinweb]

crosspost ref: tintinweb/striptls#6

Hi @Esser420,

scapy-ssl_tls is not a fully fledged tls stack (might not be compatible with all servers, dose not support all ciphers, ...) as such implementing a fully featured proxy might be cumbersome. Depending on what you're trying to accomplish you're better off striptls' generic interception feature (autodetects handshakes and wraps the socket into a tls socket providing a fake certificate, works for any protocol that starts with tls or turns into tls at any given state during the protocol) or if you're only interested in manipulating incoming tls records you could build a generic tcp proxy and put scapy-ssl_tls on top to dissect the tls messages and manipulate them.

depends on what you're trying to do :)

[tintinweb]

closing due to inactivity. feel free to reopen