본문 바로가기
App hacking

[안드로이드]SSL Burp Suite 인증서 설치, Open ssl 사용

by m_.9m 2022. 5. 19.

 

**윈도우용 바이너리 설치**

 

 

http://slproweb.com/products/Win32OpenSSL.html

 

Win32/Win64 OpenSSL Installer for Windows - Shining Light Productions

Minimum system requirements: Windows XP or later 32MB RAM 200MHz CPU 30MB hard drive space Recommended system requirements: Windows XP or later 128MB RAM 500MHz CPU 300MB hard drive space September 9, 2021 - OpenSSL 3.0 is available. Users should currently

slproweb.com

 

 `

**인증서 명령어**

 


openssl req -config ./openssl.cnf  -x509 -days 350 -nodes -newkey rsa:2048 -outform der -keyout server.key -out ca.der

openssl rsa -in server.key -inform pem -out server.key.der -outform der

openssl pkcs8 -topk8 -in server.key.der -inform der -out server.key.pkcs8.der -outform der -nocrypt

위에서 생성한 ca.der 및 server.key.pkcs8.der 파일을 삽입합니다.

Proxy > Options > Proxy Listeners > Import / export CA certificate > Export에서 "Certificate in DER format" 버튼을 클릭합니다..

export 할 파일 경로 및 파일명(burp.der)을 지정합니다. 

openssl x509 -inform DER -in burp.der -out burp.pem

openssl x509 -inform PEM -subject_hash_old -in burp.pem

burp.pem의 이름을 위에서 추출한 hash 값(a962c71d)과 확장자 0으합니다. 

nox_adb devices
nox_adb root
nox_adb push a962c71d.0 /mnt/sdcard/Download/
nox_adb shell
mount -o rw,remount /system
mv /mnt/sdcard/Download/a962c71d.0 /system/etc/security/cacerts/a962c71d.0
reboot
 

 

 

**오류**

 

Unable to load config info from /usr/local/ssl/openssl.cnf

openssl req -config ./openssl.cnf -new -key key_2048.key -out csr_2048.csr

>> 경로를 함께 넣어줌.