I'd like to investigate some SSL (https?) traffic coming from one of my computers. The problem is that I don't know for sure which program it comes from, and I most likely can't make it use a proxy (so tools like Fiddler or Charles won't work). However, I believe the program creating the traffic does not check the validity of the certificates. Even if it does, there is a good chance it respects the system certificate store, so I could put my own root in there.
Can I make wireshark (or any similar tool) somehow accept each SSL connection with a fake certificate, unpack and show me the data, and then open another SSL connection to the remote host? Preferably this technique should work on Windows.
(Similar other questions on this site assume that I can either configure the program to be MITMed (by setting a proxy) or that I can capture some secrets from the SSL sessions. I want to inject fake certificates into all outgoing SSL connections, live.)