Permacomputing Wiki

• mitmproxy

  152 34,485 9.4 Python

  An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

  

I'm actually doing this kind of thing at work right now. A client has a piece of software written by a vendor that went belly-up in 2007. The software is a central part of their business (don't ask me why they didn't try harder earlier to replace this piece of software in the past 15 years), but only talks SSL 3.0 and talks to internet resources to function.

We had set up a shim for them to give them time to fix this mess, by setting up mitmproxy[0] explicitly enabling SSL 3.0 and upgrading the protocol for external requests. Since then, the shim has been killed by a careless upgrade, and it turns out that most SSL software (including OpenSSL) can't even be forced to talk SSL 3.0 anymore. If you want to get OpenSSL to talk SSL 3.0, you need an old version. The modern versions maintain the enable-ssl3 option, but it is always forced to no-ssl3 at configure time. I don't know if there's an easy way around this, so I've set up a docker image that pulls and builds and old version, and installs an old version of mitmproxy (along with python's cryptography and other dependencies).

It's not elegant, but it does technically work, for now. At some point, it's likely that the ciphers supported by it won't be supported by the modern internet, in which case I suppose you could daisy-chain mitmproxy instances, each upgrading the protocols for the last.

If somebody has a better idea for this kind of situation, I'd love to hear it. I hate this setup and would love to have a more elegant solution.

[0]: https://mitmproxy.org/

• website

  71 37 8.5 HTML

  The Haiku website. (Pull requests are accepted; please file issues at https://dev.haiku-os.org). (by haiku)

  

Niiiice, sounds good. Indeed, I have a few machines with their "original" (or originally-supported OS), and then sometimes try different stuff on them. BTW, another cool one to try on PowerPC is Haiku OS! I haven't yet tried it myself, but... https://www.haiku-os.org/

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project