Timeline for Can I force app-server communication not to use DHE/ECDHE?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 28, 2017 at 9:31 | vote | accept | user58222 | ||
| May 27, 2017 at 19:34 | answer | added | Fis | timeline score: 1 | |
| May 27, 2017 at 19:25 | comment | added | user58222 | @CodesInChaos, sorry, do yo mean I have access to the app's source? I had to mention I just downloaded an app and want to see decrypted traffic. | |
| May 27, 2017 at 19:23 | history | edited | user58222 | CC BY-SA 3.0 |
added 15 characters in body
|
| May 27, 2017 at 19:21 | comment | added | CodesInChaos | Can't you just hook the API of the SSL library and log all the data passing through? | |
| May 27, 2017 at 19:15 | comment | added | eckes | If you have access to the truststore of the client you can also use a MITM proxy. | |
| May 27, 2017 at 19:13 | comment | added | user58222 | @eckes, I don't have access to the server configuration and don't have the sources of an app. I've just downloaded an app and want to look to traffic being transferred. | |
| May 27, 2017 at 19:13 | comment | added | cyzczy | And this should give you a nice overview how to do this sans.org/reading-room/whitepapers/authentication/… | |
| May 27, 2017 at 19:11 | comment | added | eckes | You need to export the master key, most frameworks offer this. This works with DH ciphers as well. But otherwise your client or server should allow to configure ciphers, you would remove them which you do not want to use. | |
| May 27, 2017 at 19:04 | review | First posts | |||
| May 27, 2017 at 20:25 | |||||
| May 27, 2017 at 19:04 | history | asked | user58222 | CC BY-SA 3.0 |