[76333] in cryptography@c2.net mail archive
Re: SSL Server needs access to raw HTTP data (Request for adivce)
daemon@ATHENA.MIT.EDU (Richard Powell)
Tue Jan 16 08:47:47 2007
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Richard Powell <crypto@hackhawk.net>
Reply-To: crypto@hackhawk.net
To: Cryptography <cryptography@metzdowd.com>
In-Reply-To: <1168743799.3480.10.camel@eagle.opriver.com>
Date: Sun, 14 Jan 2007 18:04:10 -0800
X-MailScanner-From: crypto@hackhawk.net
On Sat, 2007-01-13 at 19:03 -0800, Richard Powell wrote:
> I was hoping someone on this list could provide me with a link to a tool
> that would enable me to dump the raw HTTP data from a web request that
> uses SSL/HTTPS. I have full access to the server, but not to the
> client, and I want to know exactly/precisely what the client is
> transmitting.
<snip>
> ... my next solution is going to
> be to hack the s_server.c file from openssl and add the necessary
> statements to dump the desired stream.
As it turns out, getting the 1st line of the get/post was relatively
easy using s_server from openssl. Basically, there's a BIO_gets() that
reads the 1st line of input. All I had to do was add a BIO_dump() and
recompile.
Unfortunately, I can't figure out how to get the subsequent lines from
the client (ACCEPT, REFERER, etc...). I assumed I could just do
BIO_gets() until zero bytes were returned, but zero bytes are always
returned after the 1st call to the function.
I suppose I'll locate an openssl list and seek help there. :) Unless
someone happens to know the answer.
Thanks
Richard
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
