Methods and apparatus to verify encrypted handshakes
Methods, apparatus, systems and articles of manufacture are disclosed to verify encrypted handshakes. An example apparatus includes a message copier to clone a client introductory message, the client introductory message is included in a first handshake for network communication between a client and a server, a connection establisher to initiate a second handshake between the apparatus and the server based on the cloned client introductory message, and a decrypter to, in response to the second handshake, decrypt a certificate sent by the server.
1. An apparatus comprising:
at least one memory;
instructions; and
at least one processor to execute the instructions to:
clone a client introductory message without cloning Diffie-Hellman parameters of the client introductory message, the client introductory message included in a first handshake for network communication between a client and a server;
initiate a second handshake between the apparatus and the server based on the cloned client introductory message;
generate a key for the second handshake, the key generated based on a Diffie-Hellman group selected by the client; and
in response to the second handshake, decrypt a certificate sent by the server.
2. The apparatus of claim 1 , wherein the processor is to execute the instructions to terminate the second handshake in response to decrypting the certificate.
3. The apparatus of claim 2 , wherein the processor is to execute the instructions to terminate the first handshake in response to an indication that the certificate is invalid.
4. The apparatus of claim 1 , wherein the processor is to execute the instructions to, in response to observing the first handshake between the client and the server, determine if the first handshake includes a mechanism for secure handshake supported by the apparatus.
5. The apparatus of claim 4 , wherein the mechanism for secure handshake supported by the apparatus is transport layer security (TLS) version 1.3.
6. The apparatus of claim 1 , wherein the processor is to execute the instructions to initiate the second handshake in parallel with the first handshake.
7. The apparatus of claim 1 , wherein the processor is to execute the instructions to communicate with a second server to convey an indication representing at least one of a valid certificate or an invalid certificate.
8. A method to verify encrypted handshakes, the method comprising:
cloning a client introductory message without cloning Diffie-Hellman parameters of the client introductory message, the client introductory message included in a first handshake for network communication between a client and a server;
initiating a second handshake between a traffic manipulator and the server based on the cloned client introductory message;
generating a key for the second handshake, the key generating based on a Diffie-Hellman group selected by the client; and
in response to the second handshake, decrypting a certificate sent by the server.
9. The method of claim 8 , further including terminating the second handshake in response to the certificate being decrypted.
10. The method of claim 9 , wherein the first handshake is terminated in response to an indication that the certificate is invalid.
11. The method of claim 8 , further including, in response to observing the first handshake between the client and the server, determining if the first handshake includes a mechanism for secure handshake supported by the traffic manipulator.
12. The method of claim 11 , wherein the mechanism for secure handshake supported by the traffic manipulator is transport layer security (TLS) version 1.3.
13. The method of claim 8 , wherein the second handshake is initiated in parallel with the first handshake.
14. A non-transitory computer readable medium comprising computer readable instructions which, when executed, cause at least one processor to at least:
clone a client introductory message without cloning Diffie-Hellman parameters of the client introductory message, the client introductory message included in a first handshake for network communication between a client and a server;
initiate a second handshake between a traffic manipulator and the server based on the cloned client introductory message;
generate a key for the second handshake, the key generated based on a Diffie-Hellman group selected by the client; and
in response to the second handshake, decrypt a certificate sent by the server.
15. The computer readable medium of claim 14 , further including the at least one processor to terminate the second handshake in response to the certificate being decrypted.
16. The computer readable medium of claim 14 , further including the at least one processor to, in response to observing the first handshake between the client and the server, determine if the first handshake includes a mechanism for secure handshake supported by the traffic manipulator.
17. The computer readable medium of claim 14 , further including the at least one processor to initiate the second handshake in parallel with the first handshake.