Transparent SSL/TLS proxy for non-HTTP(S) connections (tool suggestions)

Question

I'm looking for a transparent SSL/TLS proxy tool to capture (and change?) generic SSL/TLS traffic (man-in-the-middle attack). Basically something that can generate certificates on the fly with its own CA. In a way, I'm looking for something like mitmproxy, but for non-HTTP(S) traffic. Any suggestions?

Answer 1

I found a tool called SSLsplit that I believe does the trick. I did not have the time to test it yet, but the man page looks like it can do plain TCP/SSL sockets.

Answer 2

If anyone finds this post in 2021 like I did. Mitmproxy now supports tcp mode so your application layer traffic need not be http.