Skip to content

Instantly share code, notes, and snippets.

@xavery

xavery/mitmproxy-unsafe-legacy-renegotiation.md

Last active May 30, 2022 18:52
Show Gist options
  • Save xavery/95e8c2fe5b1e873713000e4cb86825b3 to your computer and use it in GitHub Desktop.
Save xavery/95e8c2fe5b1e873713000e4cb86825b3 to your computer and use it in GitHub Desktop.
Download ZIP
mitmproxy error : "unsafe legacy renegotiation disabled"
Raw
mitmproxy-unsafe-legacy-renegotiation.md

Are you getting a unsafe legacy renegotiation disabled OpenSSL error from your mitmproxy while trying to snoop traffic between you and a weird server? Well, you've come to the right place.

Create this file :

ssl_conf = ssl_sect
  
[ssl_sect]
system_default = system_default_sect

[system_default_sect]
Options = UnsafeLegacyRenegotiation

Save it somewhere. We'll refer to it as $FOOBAR.

Now just run mitmproxy by specifying the path to this file as an environment variable called OPENSSL_CONF :

OPENSSL_CONF=$FOOBAR ./mitmproxy

Voilà.

All credit goes here : Kong/insomnia#4543 (comment) .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment