#!/usr/bin/perl

# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU Library General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program; if not, write to the Free Software
#  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.#
#######################################################################
#
#
# Demonstrates the man-in-the-middle attack
# Copyright 2004 - Simon Newton
#
use strict;
use warnings;

use IO::Socket::INET ;
use IO::Socket::SSL ;
use Getopt::Long ;

my $lport = '1200' ;
my $laddr = 'localhost' ;
my $cport = '443' ;
my $caddr = 'localhost' ;
my $help = 0 ;

my $result = GetOptions ("lport=s" => \$lport,
                                          "laddr=s" => \$laddr,
                                          "cport=s" => \$cport,
"caddr=s" => \$caddr,
                                          "help" => \$help
                                          );

$| = 1 ;

if($help) {
        print<<"END" ;
Usage: ssl_proxy.pl [OPTIONS]

  --cport <port>        Port to connect to (default 443)
  --caddr <address>     Address to connect to (default localhost)
  --lport <port>        Port to listen on (default 1200)
  --laddr <address>     Address to listen on (default localhost)
  --help                Display this help message
END
        exit ;
}
my $s_sock = IO::Socket::SSL->new(Listen    => 5,
                                                                  LocalAddr $                                                                  LocalPort $                                                                  Reuse => 1,                                                                  Proto => '$
die "Can't create s_socket:" , &IO::Socket::SSL::errstr , "\n" if ! $s_sock ;
while ( my $client = $s_sock->accept() ) {
    my $c_sock = IO::Socket::SSL->new( PeerAddr => $caddr . ':' . $cport,
                                         Proto    => 'tcp') ;

    die "Cannot open connection to peer $caddr:$cport:" , &IO::Socket::SSL::$                                                                            $        my $pid = fork() ;
        die "Can't fork $!" unless defined ($pid) ;

        if($pid) {
                # parent
                my $line ;
 while( $client->read($line,100) ) {
                        print $line ;
                        print $c_sock $line ;
                }
        } else {
                # child
                my $line ;
                while( $c_sock->read($line, 100) ) {
                        print $line ;
                        print $client $line ;
                }
                exit;
        }
        close $c_sock ;
        close $client ;

        print "Closed connection, awaiting next one\n" ;

}