Hi Yutaka,

I feel I'm asking very stupid questions, so bear with me.

I tried the following command:

./macosx-dg -P8080 SERVER=https -v STLS=mitm ADMIN=g_maurice@hotmail..

In my xterm I can see all the logs. These are however HTTP messages and
internal logging of delegate.
Both for HTTP servers and HTTPS servers I see the messages. The connection
with the server is made as it should be.

However, I cannot find the HTML content of "the man in the middle".
I checked the files in the delegate directory to see if the content of
secure sites is saved somewhere.
I could not find it, so I probably missed something.

The browser I use is firefox 2.0.0.8. If a secure site is accessed, in the
bottom-right corner the lock symbol is displayed. So the browser thinks that
the connection is secure.

I also tried:

./macosx-dg -v -P8081 SERVER=http MOUNT="http://https.* https://*"
STLS=fsv:https ADMIN=g_maurice@hotmail..

Also in this case the lock symbol is displayed.

Can you tell me what I'm missing here?

Thanks in advance,

Maurice



On 10/22/07, Yutaka Sato <pficabdyi-pg3up55lejtw.ml@delegate.org> wrote:
>
> Hi,
>
> On 10/15/07(04:39) you "Maurice Glandrup" <pcuhqbdyi-pg3up55lejtw.ml@delegate.org>
> wrote
> in < 7f7337600710141237i3d236b2s5c3d1b22a352a5cd@mail.gmail.com>
> |What I thought DeleGate is capable of doing is: if the browser is
> directed
> |to a https server, DeleGate can make translations that make it appear for
>
> |the browser that it is getting its data from a http server, while the
> https
>                                                  ^^^^^^^^^^^?
> |server thinks the client is a secure.
> |Besides the translation from http -> https and vice versa, DeleGate also
> |solves encryption and decription.
> |
> |If DeleGate can be configured this way, then it would be possible to
> analyze
> |the decrypted HTML content.
>
> You can cache/convert/analize the communication with the HTTPS/SSL server
> by DeleGate as a HTTP proxy.  If the clients sees the server as a HTTS/SSL
> server, it can be done with STLS=mitm, of if the client sees the server as
> if it's a HTTP server, it can be done as follows.
>
> |> It depends on why you need it to do what.  For example you can access
> |> a HTTPS/SSL server like https://server as if it is http://https.server
> |> over the bare HTTP protocol via DeleGate as a HTTP proxy like follows:
> |>
> |>   delegated -P8080 SERVER=http MOUNT="http://https.* https://*"
> |> STLS=fsv:https
>
>
> Cheers,
> Yutaka
> --
>   9 9   Yutaka Sato <pfqcabdyi-pg3up55lejtw.ml@delegate.org> http://delegate.org/y.sato/
> ( ~ )  National Institute of Advanced Industrial Science and Technology
> _<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
> Do the more with the less -- B. Fuller
>