Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

targeted mode does not support wildcard certificates #13

Open
ju916 opened this issue Jan 27, 2012 · 2 comments · May be fixed by #16
Open

targeted mode does not support wildcard certificates #13

ju916 opened this issue Jan 27, 2012 · 2 comments · May be fixed by #16

Comments

@ju916
Copy link

ju916 commented Jan 27, 2012

A vaild wildcard certificate in targeted mode leads to invalid DNS queries and programm abortion. Tested with sslsniff version 0.8

Example:

    Subject: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=*.heise.de

$ sslsniff -t -c ./certs/ -s 1414 -w x1.log
terminate called after throwing an instance of 'boost::exception_detail::clone_implboost::exception_detail::error_info_injector<boost::system::system_error >'
what(): Host not found (authoritative)
Abgebrochen

DNS-Query is done for: "*.heise.de" and fails.

Solution:

  1. support wildcard certs (using the same mechanism already in place for CA mode) OR
  2. properly reject wildcard certs with a meaningful error instead of crashing
@ju916
Copy link
Author

ju916 commented Jan 27, 2012

Rechecked with github version:

$ ./sslsniff -t -c ./certs/ -s 1414 -w x1.log
terminate called after throwing an instance of 'BadCertificateException'
what(): Could not parse certificate...
Abgebrochen

better but still a lacking feature :-)

@droe droe linked a pull request Feb 1, 2012 that will close this issue
@t193r
Copy link

t193r commented Jan 23, 2013

I found a solution here

http://double-dragon.blogspot.com/2013/01/fixing-sslsniff-problem-host-not-found.html?spref=tw

It's indonesia. But you can translate it. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants