Custom socat with SSLv2 and SSLv3 support

README.md

This script has moved to: https://github.com/leonjza/socat23

socat with sslv2 and sslv3 support

This script downloads and builds OpenSSL v1.0.2m and socat v1.7.3.2 in /usr/local/src. Once complete, a symlink at /usr/local/bin/socat-ssl23 is created so that you can run it with socat-ssl23.

install

Tested on Kali Linux:

curl -fsSL https://git.io/vFBDA | bash

build.sh

# socat with sslv2 && sslv3 support for proxies
# symlinks the built socat to /usr/local/bin/socat-ssl23
#
# 2017 - @leonjza
set -e

# https://en.wikipedia.org/wiki/OpenSSL
#   sslv2 is ripped from 1.1.0 so build latest 1.0.2
opensslversion=1.0.2m
socatversion=1.7.3.2
working_directory=/usr/local/src

# OpenSSL first
echo "Preparing working directory..."
mkdir -p $working_directory
cd $working_directory

echo "Downloading OpenSSL $opensslversion..."
curl -s -O https://www.openssl.org/source/openssl-$opensslversion.tar.gz

echo "Unpacking and building..."
tar xvf openssl-$opensslversion.tar.gz
cd openssl-$opensslversion

./config --prefix=`pwd`/local --openssldir=/usr/lib/ssl enable-ssl2 enable-ssl3 shared
make depend
make
make -i install

# set variables to use in socat build
openssl_libs=`pwd`/local/lib
openssl_include=`pwd`/local/include

echo "OpenSSL build complete."

# Next, socat!
cd $working_directory

echo "Downloading socat..."
curl -s -O http://www.dest-unreach.org/socat/download/socat-$socatversion.tar.gz

echo "Unpacking and building..."
tar xvf socat-$socatversion.tar.gz
cd socat-$socatversion

./configure LIBS="-L$openssl_libs" CPPFLAGS="-I$openssl_include"
make

echo "Creating symlink to new socat for 'socat-ssl23'..."
ln -s `pwd`/socat /usr/local/bin/socat-ssl23

echo "Done"

Had the same problem. The executable doesn't search /usr/local/src/openssl-1.0.2m/local/lib/ on runtime.

Fixed by passing the -rpath option to the linker so that the executable searchs the path.

In line 46 append LDFLAGS="$openssl_rpath" and line 32 openssl_rpath="-Wl,-rpath,'\$\$ORIGIN/../openssl-$opensslversion/local/lib' -Wl,-z,origin"

then rebuild and it should be working

Thanks @franjo2016 / @dampfklon I moved the script to a repo here so I can actually get notifications on messages.