Decrypting the HTTPS requests

Decrypting the HTTPS requests

am 19.01.2007 08:21:09 von Nikhil Kadu

This is a multi-part message in MIME format.

------=_NextPart_000_01DB_01C73BC8.7DFEFF70
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Guys,

Is it possible to decrypt the encrypted data in an HTTPS =
request/response while sitting in the Apache Proxy? Which functions of =
MOD_SSL and MOD_PROXY modules need to be tweaked to achieve this? Please =
let me know if somebody has done some related work.

Best regards,
Nikhil Kadu
------=_NextPart_000_01DB_01C73BC8.7DFEFF70
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



charset=3Diso-8859-1">




Hi Guys,

 

Is it possible to decrypt the =
encrypted data=20
in an HTTPS request/response while sitting in the Apache Proxy? =
Which=20
functions of MOD_SSL and MOD_PROXY modules need to be tweaked to =
achieve=20
this? Please let me know if somebody has done some related =
work.

 

Best regards,

Nikhil Kadu


------=_NextPart_000_01DB_01C73BC8.7DFEFF70--

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Decrypting the HTTPS requests

am 19.01.2007 16:21:52 von Dave Paris

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I typically use a SSL-terminating reverse proxy in the DMZ, like Pound,
to terminate the SSL connection at the front door and send the request
back into a private subnet over plain HTTP for IDS/IPS detection,
clicktracking, etc.

Best~
- -dsp

Nikhil Kadu wrote:
> Hi Guys,
>
> Is it possible to decrypt the encrypted data in an HTTPS request/response while sitting in the Apache Proxy? Which functions of MOD_SSL and MOD_PROXY modules need to be tweaked to achieve this? Please let me know if somebody has done some related work.
>
> Best regards,
> Nikhil Kadu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFFsOIOKmNPF3QynfQRAsGbAKCILyuzshFEcS2Kxec1Vqwx3BRPDgCf UWQ+
V+K12TOX32Jzmn2MszWgu2s=
=22Uk
-----END PGP SIGNATURE-----
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org