title: SSL Proxy / Decryption?
body: <p>One of my clients just received the software ordered from his chosen developers, asked me to look at it and prepare the hosting procedures.</p>
  
  <p>It's an Java (jar) app, so far so good ... but I saw something suspect, every 60 minutes or so the software connects to a remote host :443 port using SSL and transferring ~ 3-10 MB of encrypted data (as POST) then closes the connection, this is very strange. Tried to wireshark it but everything is encrypted and I have no clue about what kind of data is transferred, I know only the destination hostname. The hosted data within the app will be highly sensitive (insurance-broker) and if my client decides to go with it - this is a serious issue for his business and also for his clients, I've asked the developer company about this and they said that no one added something like this even if I provided them the proff (pcap).</p>
  
  <p>I can block it within firewall, but if they added something like this it could exist another hosts ready to receive the encrypted data.</p>
  
  <p>The only way I can figure it out is to somehow decrypt the SSL traffic in order to read RAW data and give my client all the needed informations in order to talk with the developer company to sort it out, how can I do that ? With some sort of ssl-proxy or whatever ... tried to google it but didn't find any kind of relevant tutorials. </p>
  
  <p>I have access to the physical machine which is running the Java application, I can see every single bit of the traffic but ... encrypted.</p>