title: How to create Man in the Middle instrumentation
body: <p>I'm trying to see how a <a href="http://www.gohome.org/wl/" rel="noreferrer">certain application</a> is talking to a server in SSL.  Basically, the process just hangs when it claims to have done some SSL communication.  I want to debug the problem by catching the traffic, but I can't really use a sniffer since SSL will probably look like a hexdump.</p>
  
  <p>Is there a good man-in-the-middle tool that I could use as instrumentation?  I just need something that will show me the decrypted communication.  Hopefully very easy to setup.  I could even point the application to any IP address/port available to my machine (eg localhost:8888), so proxies would be fine.  Also, I can probably configure the application to accept any certificate.</p>
  
  <p>What do you use to simulate a man-in-the-middle (mitm) SSL attack?</p>
  
  <p>UPDATE:  I tried fiddler and can't get it to work.  I installed openssl and typed the following command:
  <code>openssl s_client -connect smtp.gmail.com:465</code></p>
  
  <p>Gmail responds with their certificate and a <code>220 mx.google.com ESMTP ...</code>.  However, Fiddler does not capture the traffic.  I set the WinINET options in fiddler to "Use the same proxy server for all protocols".  Can anyone else get this to work (or not work)?  I think I need to find a way to have openssl use a proxy.</p>