Code:

http::register https 443 [list ::tls::socket -require 0 -request 1 -tls1 1 -command ::tls::callback -cadir /etc/ssl/certs]set ::tls::debug 0set ::tls::logcmd putlog

Code:

openssl s_client -showcerts -connect xpto.com:443

Code:

openssl s_client -showcerts -connect xpto.com:443 -CApath /etc/ssl/certs

Code:

[01:41a]  -modtcl    • TLS/sock18: alert/write: close notify[01:41a]  -modtcl    • [DEBUG] Request timeout (15s).

Code:

http::register https 443 [list ::tls::socket -require 0 -request 1 -command ::tls::callback]set ::tls::debug 3set ::tls::logcmd putlog

Code:

(curl verbose output)* successfully set certificate verify locations:*   CAfile: none* CApath: /etc/ssl/certs* SSLv3, TLS handshake, Client hello (1):* SSLv3, TLS handshake, Server hello (2):* SSLv3, TLS handshake, CERT (11):* SSLv3, TLS handshake, Server key exchange (12):* SSLv3, TLS handshake, Server finished (14):* SSLv3, TLS handshake, Client key exchange (16):* SSLv3, TLS change cipher, Client hello (1):* SSLv3, TLS handshake, Finished (20):* SSLv3, TLS change cipher, Client hello (1):* SSLv3, TLS handshake, Finished (20):* SSL connection using DHE-RSA-AES256-SHA* Server certificate:*        subject: /O=www.xpto.com/OU=Domain Control Validated/CN=www.xpto.com*        start date: 2009-11-11 05:55:55 GMT*        expire date: 2011-11-11 05:55:55 GMT*        subjectAltName: xpto.com matched*        issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07                                                                  * SSL certificate verify ok.

Code:

PHPSESSID=29o1qivkuab8taakmfhhlg9ig5

Code:

package require httppackage require tlshttp::register https 443 [list ::tls::socket -require 0 -request 1]# recursive wget with cookies and refererproc s:wget { url {refer ""} {cookies ""} { re 0 } } {   http::config -useragent "Mozilla/EggdropWget"   # if we have cookies, let's use em ;)   if {![string length $cookies]} {      catch {set token [http::geturl $url -binary 1 -timeout 10000]} error   } else {      catch {set http [::http::geturl $url -binary 1 -headers [list "Referer" "$refer" "Cookie" "[string trim [join $cookies {;}] {;}]" ] -timeout 10000]} error   }   # error condition 1, invalid socket or other general error   if {![string match -nocase "::http::*" $error]} {      s:debug "Error: [string totitle [string map {"\n" " | "} $error]] \( $url \)"      return 0   }   # error condition 2, http error   if {![string equal -nocase [::http::status $token] "ok"]} {      s:debug "Http error: [string totitle [::http::status $token]] \( $url \)"      http::cleanup $token      return 0   }   upvar #0 $token state   # iterate through the meta array to grab cookies   foreach {name value} $state(meta) {      # do we have cookies?                                                                    if {[regexp -nocase ^Set-Cookie$ $name]} {         # yes, add them to cookie list                                                                 lappend ourCookies [lindex [split $value {;}] 0]      }   }   # if no cookies this iteration remember cookies from last   if {![info exists ourCookies] && [string length $cookies]} {      set ourCookies $cookies   }   # recursive redirect support, 300's   # the full gambit of browser support, hopefully ... ;)   if {[string match "*[http::ncode $token]*" "303|302|301" ]} {      foreach {name value} $state(meta) {         if {[regexp -nocase ^location$ $name]} {            if {![string match "http*" $value]} {               # fix our locations if needed               if {![string match "/" [string index $value 0]]} {                  set value "[join [lrange [split $url "/"] 0 2] "/"]/$value"               } else {                  set value "[join [lrange [split $url "/"] 0 2] "/"]$value"               }            }            # catch redirect to self's. There is one rule:            # A url can redirect to itself a few times to attempt to            # gain proper cookies, or referers. This is hard-coded at 2.            # We catch the 3rd time and poison our recursion with it.            # This will stop the madness ;)            if {[string match [string map {" " "%20"} $value] $url]} {               if {![info exists poison]} {                  set poison 1                } else {                  incr poison                  if {$poison > 2} {                    s:debug "HTTP Error: Redirect error self to self \(3rd instance poisoned\) \( $url \)""                    return                  }               }            }            # poison any nested recursion over 10 traversals deep. no legitimate            # site needs to do this. EVER!            if {[incr re] > 10} {              s:debug "HTTP Error: Redirect error (>10 too deep) \( $url \)"              return             }            # recursive redirect by passing cookies and referer            # this is what makes it now work! :)            s:wget [string map {" " "%20"} $value] $url $ourCookies $re            # only the last iteration from our recursion is required            # we save time by using return on prior recurses. this does            # not poison the recursion because we have invoked ourself            # before we poison the unneeded iteration.            return         }      }   }   # waaay down here, we finally check the ncode for 400 or 500 codes   if {[string match 4* [http::ncode $token]] || [string match 5* [http::ncode $token]]} {      s:debug "Http resource is not evailable: [http::ncode $token] \( $url \)"      return 0   }   # uncomment the three lines below to return the http::data   # check for error by string equaling 0, if it isn't 0 it contains   # the data returned from the http transaction. If it's an empty   # reply "", it means the site is either malicious or causing you   # to have endless redirects these are poison and no html is   # returned.   # ---   # set data [http::data $token]   # http::cleanup $token   # return $data}