[prev in list] [next in list] [prev in thread] [next in thread] 

List:       owasp-webscarab
Subject:    Re: [Owasp-webscarab] SSL certificates
From:       Franck Arnulfo <franck.arnulfo () gmail ! com>
Date:       2010-06-29 11:08:14
Message-ID: AANLkTilYdJ1OFuis9mwumfdgUl4-TQ25S2mF9asTQeve () mail ! gmail ! com
[Download RAW message or body]

Works better !
No more "no keystores available".
Having a lot of " ConnectionHandler got an error :
java.net.SocketException: Connection reset" but web browser seems to
be handle this.

By the way may be you could update the wiki page
http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project to
change the source repository ?

Thanks,

Franck

On Tue, Jun 29, 2010 at 12:41 PM, Rogan Dawes <rogan@dawes.za.net> wrote:
> On 2010/06/29 12:38 PM, Franck Arnulfo wrote:
>>
>> Hi,
>>
>> I've the same problem with some of https site:
>> "ConnectionHandler got an error : java.lang.RuntimeException: SSL
>> Intercept not available - no keystores available"
>>
>> By the way the source code of webscarab is no more avaible through
>> http://dawes.za.net/gitweb.cgi in order to have the latest version.
>>
>> Thanks
>>
>> Franck
>
> Hi Franck,
>
> Please try the latest version posted at GitHub?
>
> http://github.com/OWASP/OWASP-WebScarab
>
> Rogan
>
>
>>
>>> On 2010/06/09 9:05 AM, Martin Holst Swende wrote:
>>>>
>>>> Hi Rogan, list,
>>>>
>>>> Two of my colleagues have problems running webscarab for ssl-sites. One
>>>> of them is on Mac, one on Ubuntu. Both of them use the current latest
>>>> version, and what happens is that they can connect to one ssl-doman,
>>>> like
>>>> https://foo.com?baz and everything works fine. If they try to connect to
>>>> another, https://baz.com?foo, this error occur:
>>>>
>>>> 08:55:00 Listener-127.0.0.1:8080-5(ConnectionHandler.run):
>>>> ConnectionHandler got an error : java.lang.RuntimeException: SSL Intercept
>>>> not available - no keystores available
>>>> java.lang.RuntimeException: SSL Intercept not available - no keystores
>>>> available
>>>>        at
>>>> org.owasp.webscarab.plugin.proxy.ConnectionHandler.negotiateSSL(ConnectionHandler.java:356)
>>>>        at
>>>> org.owasp.webscarab.plugin.proxy.ConnectionHandler.run(ConnectionHandler.java:152)
>>>>        at java.lang.Thread.run(Thread.java:637)
>>>>
>>>> After that they need to restart webscarab in order to continue testing
>>>> the other site.
>>>>
>>>> Any ideas?
>>>> Regards, Martin
>>>> ps. Did you have a look at the owasp-proxy-ui yet ?
>>>
>>> Hi Martin,
>>>
>>> I have pushed out a few changes to the SSL certificate selection code
>>> (including an attempt to port the SSL Cert generator from OWASP Proxy),
>>> so if you would like to ask your colleagues to try it, it would be
>>> appreciated.
>>>
>>> If it doesn't fix the problem, hopefully there should be sufficient
>>> logging to indicate where the problem lies.
>>>
>>> Thanks
>>>
>>> Rogan
>>
>> _______________________________________________
>> Owasp-webscarab mailing list
>> Owasp-webscarab@lists.owasp.org
>> https://lists.owasp.org/mailman/listinfo/owasp-webscarab
>
>
_______________________________________________
Owasp-webscarab mailing list
Owasp-webscarab@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-webscarab

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic