tuxmain/tlsbench
Watch
1
0
Fork
You've already forked tlsbench
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

netreplay generates certificates

Browse source
This commit is contained in:
Pascal Engélibert 2026-08-25 10:27:01 +02:00
commit 49dc671c31
4 changed files with 85 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

13
README.md
View file

@ -25,13 +25,13 @@ In settings, disable DNS security.
In `about:config`, set `network.dns.forceResolve` to `127.0.0.1`.
Run the shell command:
Run the shell commands:
```bash
python exp.py make debug -c
```
In Firefox, go to security settings, Certificates, import `/dev/shm/exp/certs/prime256v1/ca.crt` and trust it for identifying websites.
In Firefox, go to security settings, Certificates, import all CA certificates in `/dev/shm/exp/certs/realistic` and trust them for identifying websites.
#### After installation
@ -40,11 +40,18 @@ Stop anything running on ports 80 or 443.
Start the record proxy:
```bash
./netreplay records/mynewrecord record
mkdir -p /dev/shm/exp/fake/mynewrecord
./netreplay records/mynewrecord record /dev/shm/exp/certs/realistic /dev/shm/exp/fake/mynewrecord
```
Just browse. Any traffic will be recorded. Terminate netplayer with CTRL+C when finished.
Between each recording, erase cookies and cache, close Firefox, then clean the certificate cache with the command:
```bash
rm .mozilla/firefox/*.tlsbench/SiteSecurityServiceState.bin
```
### Measure
Copy the tlsbench folder on the target.