Client Server SSL Decryption

Fly_Al — Sat, 05 Oct 2024 20:38:32 GMT

Hi Folks ;

I have a distributed software on my internal network and everyone is using it. It's like endpoint and it has a server .this server sometimes sends something to the server in the direction of the internet.
I want to look into the data that it sends. I don't know if it is leaking critical information or what.

I opened SSL Decypt and got packet capture from Palo alto but it is full of encrypted fail errors

This is not a website because let me explain simply, the server inside sends a TLS SSL connection to the outside and ports the data, how can I see inside the data posted inside.

There is SSL Decryption on websites and it works, but how can I decrypt a software that communicates Client - Server?

Re: Client Server SSL Decryption

OtakarKlier — Mon, 07 Oct 2024 16:05:50 GMT

Hello,

You might not be able to. There are some apps that use certificate pining to prevent ssl decryption in the middle, or man-in-the-middle.

Sorry it doesnt truly answer your question.

Regards,

topic Client Server SSL Decryption in Next-Generation Firewall Discussions

Client Server SSL Decryption

Re: Client Server SSL Decryption