In a MITM-Attack I can exchange the server certificate by one I created on my own with tools like MITMProxy
or SSLSplit
. But this only works well when I have installed a fake CA cerrtificate in the victims browser otherwise it's identified as a fake certificate.
Would it be possible to create fake certicates that seems to be issued by the original CA and then fake the OCSP Response so the certificate seems valid?