I am doing some research on man-in-the-middle focusing on SSL in particular.
I have been looking into generating a certificate on request when a client connects and requests a secured page.
- Client is connected to AP controlled by me and ignoring cert validation
- AP is running airmon-ng and airbas-ng with DHCP.
- OS is Debian on a Rasp Pi, that then forwards to the real WWW
Is it feasible to generate a certificate per request, and if so, are tools available for this, or would the request have to be scripted to sign a cert via OpenSSL, and logging the event.