Results 177 comments of Soner Tari

You should use a CA cert/key pair with sslproxy. I see above that sslproxy complains about not matching key and cert. So you should generate a CA cert/key pair and...

You can find [a sample config file](https://github.com/sonertari/SSLproxy/blob/master/src/sslproxy.conf) in the sources. If you're asking about L2 bridge mode, no, sslproxy does not support bridge mode. SSLproxy runs at L3/L4 level.

*SSLProto rules in global, proxyspec, and filterrules config apply to both client and server sides. So I don't think SSLproxy can do that. But, I think that may happen if...

No it's human developers who are not reliable (and in this case that's me myself), not PHP.

Thanks for the detailed report. I see that you use version v0.5.5. Since that release we've made a couple of important changes on the develop branch. Particularly relevant here are...

Ah, sorry, it's on the `underlying-bevs-issue#303` branch: https://github.com/droe/sslsplit/compare/develop...underlying-bevs-issue%23303 But, if the file is just19KB, then I don't think that's the issue, as you guessed too. I should try to reproduce...

On OpenBSD/pf I'd try the following divert rule: `pass out log quick on en0 proto tcp to port www divert-to lo port 8080` But, - I guess your OS and...

See [SSLproxy](https://github.com/sonertari/SSLproxy) for answers to those questions. But SSLproxy does not support reloading proxyspecs and filtering rules (you should fully stop and restart sslproxy for that).

Firstly, the target server address is determined at connection establishment time. The two main options are using the NAT engine of the system or the target address specified in the...

The listening program should return the packets back to sslproxy on the server side. For example, in your sample output above, your Python script should start a connection to [127.0.0.1]:45101...