My environment is Linux Kali in virtual marchine and I am trying to decrypt the SSL/TLS from an ELF program.
For that I am using PolarProxy, I download the application for linux and configured the iptables commmands :
sudo iptables -A INPUT -i eth0 -p tcp --dport 10443 -m state --state NEW -j ACCEPT
sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to 10443
After that, I added the cert certificate into my linux system from this tutorial from the official website : https://www.netresec.com/?page=PolarProxy
After that I started the polarproxy application in command line :
sudo ./PolarProxy -v -p 10443,80,443 --certhttp 10080 -w ~/polarproxy.pcap
And after that, I started the application and got this error :
15:42:46.794 › Error: Error: net::ERR_CERT_AUTHORITY_INVALID
and I got more information on polarproxy :
<6>[10443] Active tasks : 1
<6>[10443] 10.0.2.15:10443 -> ?:443 Connection from: 10.0.2.15:39150
<6>[10443] 10.0.2.15:10443 -> github.com:443 Connection request for github.com from 10.0.2.15:39150
<3>[10443] 10.0.2.15:10443 -> github.com:443 Internal TLS session Exception: SSL Handshake failed with OpenSSL error - SSL_ERROR_SSL.
<6>Saving debug log to /root/.local/share/IsolatedStorage/dccflvfb.pfg/yzjhnzrw.jtk/Url.2wipyxq23b2qzm44ql2b3al5pbwgor5r/AssemFiles/_220312-154130.log
<4>[10443] ?:10443 -> github.com:443 Internal SSL session did not authenticate successfully
<6>[10443] Active tasks : 0 ```
I Thinks it's about the certificate but If people can help me it's will be amazing because I am really lock.
Thanks.
