Daniel Roethlisberger
Daniel Roethlisberger
``` BOOL BASE_PATHFUNC_IsNTFSStreamName(PCHAR Path) { PCHAR Ptr; if ((Ptr = strrchr(Path, ':'))) { return *(Ptr + 1) != '\\'; } else { return 0; } } ```
So with the scheme `filename:streamid` current behaviour is to convert the filename to `filename_streamid`, so data is accessible. However, on Windows, the streams should be restored to streams, not separate...
Can you post the output of `openssl x509 -in cert.pem -text` on the CA certificate that you are using with SSLsplit and how you generated it? If applicable, which documentation...
Okay, you want to have basic constraints in your CA certificate. Check out the openssl commands in the make file and the config file that goes with them in https://github.com/droe/sslsplit/blob/develop/extra/pki/...
I tried but I cannot reproduce this problem. I can intercept traffic to Wikipedia just fine with Chrome on macOS.
I'm using OpenSSL 1.0.2o. Perhaps a pcap of both the network traffic before and after sslsplit could help narrowing down what's happening.
You can mail it to me instead of posting here if you prefer
Can you retest with lastest `develop` after the commit referenced in #189 ?
"Peeking did not yield a (truncated) ClientHello message, aborting connection" means that sslsplit was unable to parse the SSL/TLS ClientHello message. If this is happening, capture the respective SSL/TLS connection...