4 ms·
I never meant that changing the certificate is impossible, just that it isn't trivial.
by lucian1900 14y ago
I never meant that changing the certificate is impossible, just that it isn't trivial.
- icebraining 14y agoI only did something like that once, but it was absolutely trivial, since it included the ASCII header. Search, overwrite, add a little padding, done.
- gknoy 14y agotoblaso means that rather than finding/changing the certificate, someone patching the game could either replace the certificate with a self-signed/generated one (for your local server instance), or completely bypass the usage of SSL entirely.
- nwh 14y agoI've done similar while reverse engineering a protocol. Just whipped open a hex editor, found the signature of the certificate and bamn. Neutered.