You can inject hooks into the certificate validation routines to make your certificates accepted, hook the actual encrypt&#x2F;decrypt functions, or make the session establishment routines leak the master secret.