0

Let's say I perform some request through OWASP ZAP local proxy, and it fails SSL handshake for some reason.

Is there any way to see what SSL certificates zaproxy offered during the handshake, at which url etc?

Improve this question
2
  • With a packet capture, sure
    – schroeder ♦
    May 3, 2020 at 19:46
  • @schroeder can you elaborate, please?
    – desudesudesu
    May 3, 2020 at 20:17

2 Answers 2

Reset to default
1

The TLSDebug add-on might help you.

https://www.zaproxy.org/docs/desktop/addons/tls-debug/

Get it via the marketplace: enter image description here

If you're running ZAP on a system where you can do packet capture then you can see the TLS (or SSL if you're still using it .... in 2020 you shouldn't.), behavior and details on both sides of the proxy. You can inspect such interactions with a tool like Wireshark - https://www.wireshark.org/.

Also in most modern browsers you can inspect the TLS/SSL details between the client and proxy (or server when not using a proxy) with fairly simple built-in functionality. Just do a quick web search for your preferred browser and 'TLS connection details' or 'certificate details', etc

Improve this answer
1
  • Interesting tool, but not doing what I was asking about. This tool helps to get TLS for any external address, and I'm interested in checking TLS vs my OWASP ZAP proxy.
    – desudesudesu
    May 3, 2020 at 23:50
0

what Schroeder means in first comment is you may use Wireshark to capture the stream of SSL/TLS to destination IP and examine the SSL/TLS handshake initiated trough OWASP ZAP Proxy. Make sure other source from your machine is not trying to connect to same destination after the capture in Wireshark starts.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .