sslproxy.conf(5)

NAME

sslproxy.conf - Configuration file for SSLproxy

DESCRIPTION

The file sslproxy.conf configures SSLproxy, sslproxy(1).

FILE FORMAT
The file consists of comments and options with arguments. Each line which starts with a hash (#) symbol is ignored by the parser. Options and arguments are of the form Option Argument. The arguments are of the following types:

BOOL
    Boolean value (yes/no).

STRING
    String.

NUMBER
    Unsigned integer.

DIRECTIVES

When an option is not used (hashed or doesn't exist in the configuration file) sslproxy takes a default action.

CACert STRING
    Use CA cert (and key) to sign forged certs.

CAKey STRING
    Use CA key (and cert) to sign forged certs.

ConnIdleTimeout NUMBER
    Close connections after this many seconds of idle time.
    Default: 120

ExpiredConnCheckPeriod NUMBER
    Check for expired connections every this many seconds.
    Default: 10.

SSLShutdownRetryDelay NUMBER
    Retry to shut ssl conns down after this many micro seconds. Increasing this delay may avoid dirty shutdowns on slow connections, but increases resource usage, such as file desriptors and memory.
    Default: 100

PidFile STRING
    Write pid to file.

LogStats BOOL
    Log statistics to syslog.
    Default: yes

StatsPeriod NUMBER
    Log statistics every this many ExpiredConnCheckPeriod periods.
    Default: 1

User STRING
    Drop privileges to user.
    Default: nobody, if run as root

Group STRING
    Drop privileges to group.
    Default: Primary group of user

RemoveHTTPAcceptEncoding BOOL
    Remove HTTP header line for Accept-Encoding.
    Default: yes

RemoveHTTPReferer BOOL
    Remove HTTP header line for Referer.
    Default: yes

VerifyPeer BOOL
    Verify peer using default certificates.
    Default: yes

AllowWrongHost BOOL
    Allow wrong host names in certificates.
    Default: no

ProxySpec STRING
    Proxy specification: type listenaddr+port up:utmport. Multiple specs are allowed, one on each line.

FILES

/etc/sslproxy/sslproxy.conf

AUTHOR

Soner Tari <sonertari@gmail.com>

SEE ALSO

sslproxy(1)