Soner Tari

I guess they are compressed. See "content-encoding: gzip" on your screenshot?

I've tried to compile using your command line, and I get the same errors. Honestly I had never tried to build a statically linked sslproxy binary before. I will try...

I think no need for that, because I am the maintainer of SSLsplit too :).

On second thought, SSLsplit has more than 100 watchers, perhaps they can help, so by all means submit an issue there too.

SSLproxy forges the server certificate using the CA cert supplied, which in your case is in a structured proxyspec in your config file. This is how it decrypts the traffic....

As described in the README file, PFRE uses a design similar to MVC and privsep (see the [Features section](https://github.com/sonertari/PFRE#features) of the README). The Model uses the pfctl utility to test...

Have you tried the tls13 branch? Otherwise, sslsplit does not support TLSv1.3. The develop branch gives (the -V option): > SSL/TLS protocol availability: tls10 tls11 tls12 But [SSLproxy](https://github.com/sonertari/SSLproxy) does support...

It may be because sslsplit does not support TLS 1.3 yet. Can you check the output of the -V option? If that's the issue, I'd recommend trying [SSLproxy](https://github.com/sonertari/SSLproxy) in split...

Your version of sslsplit is too old. So I'd recommend you build and use the develop branch instead. Also, make sure you compile and link the same OpenSSL version (not...

The `DEBUG_CERTIFICATE` and `DEBUG_CLIENTHELLO_PARSER` switches may help too. You may see more details if you start sslproxy with `-D4`, very verbose logging. I've never seen the error reason that sslproxy...