I am analysing a programm with frida that definitely connects to some server via SSL. When I call SSL_get_fd, it returns -1. From the documentation I see that this means that ssl doesnt wrap a socket (BIO is definitely configured, as I can access it via SSL_get_rbio). How can openssl connect to a server without a socket? Is there any way to see the peer address/port without accessing the underlying socket?
Asked
Active
Viewed 192 times
5
He1n
- 51
- 1
-
What openssl version so you use? Did you figure out the issue? – Eytan Naim Aug 02 '21 at 21:15
-
Can you tell us what did you do ? – vtable Dec 16 '21 at 13:34
-
What OS do you use? Anyway, search for "netstat", maybe that's what you're looking for. – Remigijus Pankevičius Dec 16 '21 at 22:06
-
@RemigijusPankevičius Android, `netstat` show the remote it that the process communicate with , but if the process talk with some ip , with debugging we can see each SSL data send to each IP – vtable Dec 16 '21 at 22:20