Added a (disabled) test of low-security ciphersuites.
Enabling this allows the connection to be sniffed and decoded using Wireshark, when given the SSL private key.
This commit is contained in:
parent
e2bf3783e8
commit
e1b6a16945
@ -70,6 +70,18 @@ int cSslContext::Initialize(bool a_IsClient, const SharedPtr<cCtrDrbgContext> &
|
|||||||
ssl_set_dbg(&m_Ssl, &SSLDebugMessage, this);
|
ssl_set_dbg(&m_Ssl, &SSLDebugMessage, this);
|
||||||
ssl_set_verify(&m_Ssl, &SSLVerifyCert, this);
|
ssl_set_verify(&m_Ssl, &SSLVerifyCert, this);
|
||||||
*/
|
*/
|
||||||
|
|
||||||
|
/*
|
||||||
|
// Set ciphersuite to the easiest one to decode, so that the connection can be wireshark-decoded:
|
||||||
|
static const int CipherSuites[] =
|
||||||
|
{
|
||||||
|
TLS_RSA_WITH_RC4_128_MD5,
|
||||||
|
TLS_RSA_WITH_RC4_128_SHA,
|
||||||
|
TLS_RSA_WITH_AES_128_CBC_SHA,
|
||||||
|
0, // Must be 0-terminated!
|
||||||
|
};
|
||||||
|
ssl_set_ciphersuites(&m_Ssl, CipherSuites);
|
||||||
|
*/
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
m_IsValid = true;
|
m_IsValid = true;
|
||||||
|
Loading…
Reference in New Issue
Block a user