Archives
/
SSLproxy
mirror of https://github.com/sonertari/SSLproxy
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
925 Commits
2 Branches
25 Tags
3.7 MiB
develop
master
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0
v0.7.0
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4
v0.8.5
v0.8.6
v0.9.0
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.5
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '69753b250c'
${ noResults }
Commit Graph

925 Commits (69753b250c5d5afe6f3c8121e8494e5df1a5c2e1)
 

Author SHA1 Message Date
Soner Tari 69753b250c Add split mode of operation similar to SSLsplit 
The -n command line option enables split mode for all proxyspecs,
effectively making sslproxy behave like sslsplit.
Divert option can be set/unset globally and per-proxyspec.
Add e2e tests for split mode, and update make file for tests
accordingly.
Update documentation accordingly.
Improve code reuse, remove duplicate functions.

This change deserves a release of its own, hence v0.8.4.
 3 years ago
Soner Tari a6cf55cffe Refactor ifdef directive for get_client_ether() call 3 years ago
Soner Tari f8ada5100a Fix initialization of content logging in lp (issue #30) 
readcb fires before connect eventcb, so we enable it in readcb now. But
perhaps lp should behave like sslproxy and not enable readcb until after
connect eventcb.

Note that there is no problem with sslproxy, it's just lp.
 3 years ago
Soner Tari 1bb5bd2398 Improve UserAuth documentation 3 years ago
Soner Tari 41ec0045f5 Disable osx build on travis until xcode/xnu version fixed 3 years ago
Soner Tari 2b9cb937fd Improve documentation 3 years ago
Soner Tari 0bd1a414cb Fix libpcap install on macOS 10.13 3 years ago
Soner Tari 7ed4748d96 Fix clang warning due to -Wpointer-bool-conversion, remove NONNULL for list 
pxyconn.c:1590:9: warning: comparison of nonnull parameter 'list' not
equal to a null pointer is 'true' on first encounter
 3 years ago
Soner Tari 596aebb2f3 Update version to 0.8.3 and copyright year to 2021 3 years ago
Soner Tari 6b2072dc94 Fix formatting for -A option 
Reported on sslsplit as https://github.com/droe/sslsplit/issues/287
 3 years ago
Soner Tari 10f753c012 Remove delimiters around user names 
Delimiter can be either or all of ",", " ", and "\t", and we don't allow
spaces in user names now
 3 years ago
Soner Tari cb28a1e12a Do not debug print proxyspecs in proxy_new() 3 years ago
Soner Tari 65b7fb9847 Reduce code for user lists 3 years ago
Soner Tari 66dddf2cdb Add info on IPv4-only features 3 years ago
Soner Tari 255cd1cd88 Separate make test as unit and e2e 3 years ago
Soner Tari 9c76563cee Fix mistake: return address -> divert address 3 years ago
Soner Tari 177f6a3b52 Improve overview 3 years ago
Soner Tari def65e195c Update man page with README 
Improve README
 3 years ago
Soner Tari f1e9de7386 Improve documentation 3 years ago
Soner Tari f254ac1586 Add info on DivertUsers and PassUsers options 4 years ago
Soner Tari aded848043 Release v0.8.2 4 years ago
Soner Tari e2bf278933 Allow mirroring without explicit target 
Allow omitting the -T option, indicating the target is irrelevant.

The use case is an IDS sensor listening on a dummy interface for the
packets sslsplit produces. The IDS will listen in promisc mode, so the
target is irrelevant.

Copied from sslsplit.
 4 years ago
Soner Tari 463aa1a71e Fix doc typo 4 years ago
Soner Tari 151b305c2f Do not pass null arg to log_*_printf() 
vfprintf %s NULL in "Error from bufferevent: %i:%s %lu:%i:%s:%i:%s:%i:%s
"
Error from bufferevent: 32:Broken pipe 50327584:32:Broken pipe:2:system
library:4095:(null)
 4 years ago
Soner Tari 4c94853fc5 Disable UserAuth in main.mk if we are not on OpenBSD or Linux 
Fixes osx build after updates to userauth
 4 years ago
Soner Tari 80d10a94c3 Move classify_user into identify_user 
Otherwise, we cannot classify user if we need to issue identify_user
events, in case database is busy or locked. We should call classify_user
callback right after the user is identified.
So we introduce classify_user callback to achieve that, which fixes the
classify_user behavior for autssl proto too.

Return void in pxy_userauth
Fix typo in clasify
 4 years ago
Soner Tari 4f3ce763ac Add DivertUsers and PassUsers options 
Update documentation
 4 years ago
Soner Tari 6c0b981831 Update version to 0.8.1 
Update TLS 1.3 documentation.
 4 years ago
Soner Tari 4ee7bbcf15 Fix whitespace 4 years ago
Soner Tari e209a04268 Fix line_num reported if conf file contains structured proxyspecs 4 years ago
Soner Tari 6f5a7ceeb1 Add WITHOUT_USERAUTH switch 4 years ago
Soner Tari ca79405769 Fix doc for MaxSSLProto default as tls13 4 years ago
Soner Tari e51afcfe4a Fix default CipherSuites 4 years ago
Soner Tari 176570c4a4 Silence warning about <sys/sysctl.h> deprecated on Linux 
/usr/include/x86_64-linux-gnu/sys/sysctl.h:21:2: warning: #warning "The
<sys/sysctl.h> header is deprecated and will be removed." [-Wcpp]
 4 years ago
Soner Tari b679439c9f Silence warning about output truncated before terminating nul by gcc 9.3.0 
/usr/include/x86_64-linux-gnu/bits/string_fortified.h:106:10: warning:
‘__builtin_strncpy’ output truncated before terminating nul copying as
many bytes from a string as its length [-Wstringop-truncation]
 4 years ago
Soner Tari 25ec9d58bc Silence alignment warning by gcc 9.3.0 
logpkt.c:351:3: warning: converting a packed ‘ip4_hdr_t’ {aka ‘struct
<anonymous>’} pointer (alignment 1) to a ‘uint16_t’ {aka ‘short unsigned
int’} pointer (alignment 2) may result in an unaligned pointer value
[-Waddress-of-packed-member]
 4 years ago
Soner Tari ad21615dbe Add -U to getopt() shortopts 4 years ago
Soner Tari af27340889 Add -U CipherSuites option 4 years ago
Soner Tari 3f2d0d56d6 Fix debug dump for no_tls12/no_tls13 4 years ago
Soner Tari fade72ec0d Move main.mk under Mk folder and improve make files 4 years ago
Soner Tari 1a3a2fb9f6 Add missing HAVE_TLSV13 code 4 years ago
Soner Tari 2f89a27551 Use Testproxy v0.0.3 4 years ago
Soner Tari 8989873332 Add sni assertions to testproxy e2e tests for tls12 and tls13 4 years ago
Soner Tari 1403c4eda1 Fix travis for ssl libs without tls13, add no_tls13 e2e tests 4 years ago
Soner Tari f9c8ecbc69 Fix build with LibreSSL 3.1.2, which does not have tls13 4 years ago
Soner Tari ee41c72666 Add tls13 support 
Add e2e tests for tls13 too
 4 years ago
Soner Tari 9da7437919 Release v0.8.0 4 years ago
Soner Tari 826b612c1e Fix build version 
Improve documentation
 4 years ago
Soner Tari 3fe0e5f1eb Move tmp global opts vars to new tmp struct 
The global opts strings in this new tmp struct are used while cloning
global opts into proxyspec opts. A var of this type is passed around as
a flag to indicate if these opts are global (if non-NULL), so should be
stored in that struct and used as such, or proxyspec specific (if NULL),
so should not be used as global. This var is temporary, hence freed
immediately after configuration is complete.
Also improve and clean up.
 4 years ago
Soner Tari 6abfa01252 Free all structs created for testing 4 years ago