1

I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic.

Is there any way to decrypt the traffic except extracting master secret or RSA private key? Will MITM approach (like sslsplit) work here?

Improve this question

1 Answer 1

Reset to default
1

In modern TLS, the private key of the leaf certificate won't let you decrypt previously recorded traffic, because modern TLS has DH (specifically, ECDHE) which provides PFS.

So you need to MiTM the connection or extract the per-connection ephemeral keys from the app.

Improve this answer
5
  • Is MITM possible when the app check for expected certificate?
    – WLTY
    Commented Nov 12, 2020 at 15:19
  • Not in a simple way.
    – Z.T.
    Commented Nov 12, 2020 at 15:27
  • is there any way except changing/removing cert check?
    – WLTY
    Commented Nov 12, 2020 at 15:34
  • If it actually checks the expected cert or public key or their hash, no.
    – Z.T.
    Commented Nov 12, 2020 at 15:35
  • 1.3, which is not in the Q, has only PFS, actually both ECDHE and FFDHE but the latter is rare now. 1.0 through 1.2 (all) have both xxDHE and plain-RSA, although post-Snowden more people prefer or require xxDHE.
    – dave_thompson_085
    Commented Nov 13, 2020 at 1:06

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .