Skip Menu |

This queue is for tickets about the HTTP-Recorder CPAN distribution.

Report information
The Basics
Id: 3965
Status: resolved
Priority: 0/
Queue: HTTP-Recorder

People
Owner: leira [...] cpan.org
Requestors: jason [...] multiply.org
Cc:
AdminCc:

Bug Information
Severity: Wishlist
Broken in: (no value)
Fixed in: (no value)



Subject: Can't currently act as a proxy for recording SSL sessions
Recorder is not currently acting as a proxy for HTTPS connections. It would be nice to transparently support both normal and encrypted connections for recording, if possible.
[guest - Thu Oct 2 15:36:01 2003]: Show quoted text
> Recorder is not currently acting as a proxy for HTTPS connections. It > would be nice to transparently support both normal and encrypted > connections for recording, if possible. >
The proxy capabilities of HTTP::Recorder depend on HTTP::Proxy. As from version 0.13, HTTP::Proxy supports SSL via the CONNECT method, but cannot look inside the encrypted session. Future versions of HTTP::Proxy will probably be able to work as a "man in the middle", by sending their own certificate to the client and peeking at the data as it decrypted by the proxy.
[BOOK - Sun Jan 25 06:24:39 2004]: Show quoted text
> The proxy capabilities of HTTP::Recorder depend on HTTP::Proxy. > As from version 0.13, HTTP::Proxy supports SSL via the CONNECT > method, but cannot look inside the encrypted session.
Thanks for the info on this. I'll look into it, and make appropriate recommendations in the next version of the HTTP::Recorder doc. Show quoted text
> Future versions of HTTP::Proxy will probably be able to work as > a "man in the middle", by sending their own certificate to the > client and peeking at the data as it decrypted by the proxy.
That's great. I was planning to implement something like this for HTTP::Recorder, but if it's coming soon in HTTP::Proxy, I might hold off. Any ideas on when? Linda
HTTP::Recorder 0.03 will support recoring SSL sessions. Linda