I want to capture HTTPS traffic, save it, and validate it at a later time. I want to ensure that at a later time I'm able to validate the HTTPS traffic using the certificate which was presented at the handshake.
Any ideas how to do that? I can use
openssl to get the certificate and the corresponding chain. I can use
curl and its
trace option to dump all incoming (response) and outgoing data (request) when performing a HTTPS request from my machine. But,
curl does not provide an option to validate that the HTTPS traffic was signed using a special certificate.