https://blog.heckel.xyz/2013/08/04/use-sslsplit-to-transparently-sniff-tls-ssl-connections/

http://mirror.roe.ch/rel/sslsplit/sslsplit-latest.1.txt

https://www.roe.ch/SSLsplit


설치
make



돌리기

client는 gateway를 sslsplit 서버로 설정
transparent mode로만 동작하는듯


iptables 설정 필요함

sysctl -w net.ipv4.ip_forward=1
iptables -t nat -F
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080
iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-ports 8443


sslsplit -k ../CA.key -c ../CA.crt -D -S /tmp/sslsplit https 0.0.0.0 8443


ca파일 만들기

openssl genrsa -out ca.key 4096
openssl req -new -x509 -days 1826 -key ca.key -out ca.crt

윈도우에서 ca.crt를 루트인증기관으로 설치