Archives/SSLproxy
2
0
Fork 0
mirror of https://github.com/sonertari/SSLproxy synced 2024-11-02 15:40:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Modernize fast cipher suites example and explanation

Browse Source
This commit is contained in:
Daniel Roethlisberger 2016-03-25 23:56:43 +01:00
parent ac3e845fbe
commit 1bd963caf2
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
sslsplit.1
View File

@ -626,16 +626,17 @@ instead of querying a NAT engine:
.RE
.LP
The original example, but using SSL options optimized for speed by disabling
compression and selecting only fast block cipher cipher suites and using a
precomputed private key \fBleaf.key\fP for the forged certificates
(most significant speed increase is gained by choosing fast algorithms and
small keysizes for the CA and leaf private keys; check \fBopenssl speed\fP for
algorithm performance on your system and note that clients may not support all
algorithms and key sizes):
compression and selecting only fast cipher cipher suites and using a
precomputed private key \fBleaf.key\fP for the forged certificates. Most
significant speed increase is gained by choosing fast algorithms and small
keysizes for the CA and leaf private keys. Check \fBopenssl speed\fP for
algorithm performance on your system. Note that clients may not support all
algorithms and key sizes. Also, some clients warn their users about cipher
suites they consider weak.
.LP
.HS
.nf
\fBsslsplit -Z -s NULL:RC4:AES128 -K leaf.key \\
\fBsslsplit -Z -s NULL:RC4:AES128:-DHE -K leaf.key \\
-k ca.key -c ca.crt -l connect.log -L /tmp \\
https ::1 10443 https 127.0.0.1 10443 \\
http ::1 10080 http 127.0.0.1 10080\fP