@raphael I think what you need is some sort of MITM-TLS proxy
Notices by Srujan (jonnadul@infosec.exchange)
-
Embed this notice
Srujan (jonnadul@infosec.exchange)'s status on Friday, 03-Jan-2025 03:13:55 JST Srujan -
Embed this notice
Srujan (jonnadul@infosec.exchange)'s status on Sunday, 29-Dec-2024 07:48:06 JST Srujan @raphael sorry not exactly sure what you mean by decode but TLDR the server will initiate a handshake to establish an encrypted session with ANY incoming client call regardless of what cert the client presents (as long as they present one to facilitate the handshake). This is why you can access www.google.com regardless of what client browser, phone, etc.
-
Embed this notice
Srujan (jonnadul@infosec.exchange)'s status on Sunday, 29-Dec-2024 07:03:57 JST Srujan @raphael by definition TLS is a one-way verification operation where the client verifies the authenticity of the server based off the certs its presents.