moxie0/sslsniff — Issue #13: targeted mode does not support wildcard certificates
Author: ju916
Created: 2012-01-27 13:08:08+00:00
State: open

A vaild wildcard certificate in targeted mode leads to invalid DNS queries and programm abortion. Tested with sslsniff version 0.8

Example:

Subject: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=*.heise.de

$ sslsniff -t -c ./certs/ -s 1414 -w x1.log
terminate called after throwing an instance of 'boost::exception_detail::clone_impl >'
what(): Host not found (authoritative)
Abgebrochen

DNS-Query is done for: "*.heise.de" and fails.

Solution:

1) support wildcard certs (using the same mechanism already in place for CA mode) OR
2) properly reject wildcard certs with a meaningful error instead of crashing