Daniel Roethlisberger
85b177f6b0
Special device nodes may be needed for -j to work
2014-08-26 14:29:56 +02:00
Daniel Roethlisberger
3226d9bfcf
No longer chroot() by default when run as root
...
No longer implicitly use -j /var/empty by default and document clearly
the implications of using -j with -S and/or sni proxyspecs.
Issue: #21
2014-01-30 23:34:37 +01:00
Daniel Roethlisberger
6643d832d9
Add experimental support for pf on Mac OS X
...
Support pf rdr on Mac OS X 10.7, 10.8 and 10.9 by including the missing
Apple headers in the source tree and enable private Apple code. Since
we are using an interface marked private by Apple, this code is very
experimental.
Issue: #15
Reported by: Amit Chowdhary
2014-01-10 15:03:13 +01:00
Daniel Roethlisberger
ca923ee7f1
Update copyright notices to 2014
2014-01-06 14:09:18 +01:00
Daniel Roethlisberger
8cc81c7f1c
FreeBSD pf also has divert-to since 9.0-RELEASE
2013-12-23 14:13:27 +01:00
Daniel Roethlisberger
0987300e28
Improve IPFW and pf wording in the documentation
2013-12-23 13:57:57 +01:00
Daniel Roethlisberger
68a60b9734
Update manual page for OpenBSD
...
Add configuration examples for both old and new OpenBSD pf syntax and
give an example of using OpenBSD pf divert sockets for redirection.
Based on the OpenBSD port patchset.
Reported by: Stuart Henderson
2013-12-17 15:28:30 +01:00
Daniel Roethlisberger
c73ce64c16
Update README and manual page for HPKP prevention
2013-06-29 23:29:31 +02:00
Daniel Roethlisberger
c972501063
Update copyright notices
2013-04-24 20:36:38 +02:00
Daniel Roethlisberger
807b7c1d3b
Fix typo in manpage
2012-10-16 21:56:03 +02:00
Daniel Roethlisberger
62af96e413
Clarify when it is preferred to use SNI proxyspecs
2012-05-13 22:33:31 +02:00
Daniel Roethlisberger
3742404fe9
Update ECDH default curve name in manual page
2012-05-11 18:19:07 +02:00
Daniel Roethlisberger
7ad1deb680
Document intended use of SSLsplit
2012-05-11 18:12:22 +02:00
Daniel Roethlisberger
6d58824de2
Fix typo in manual page
2012-05-03 01:01:57 +02:00
Daniel Roethlisberger
2d1ad219b9
Change default cipher suite to "ALL:-aNULL"
2012-05-02 14:59:47 +02:00
Daniel Roethlisberger
1bd2872b20
DH group parameters are also loaded from -c
2012-05-02 13:46:18 +02:00
Daniel Roethlisberger
7aca81a7b7
Improve CA cert/key config code and docs
...
Make -c and -k functional twins by also loading DH params in -c and by
fixing certificate loading in -k. Improve the documentation for both
switches and simplify the SYNOPSIS in sslsplit(1).
2012-04-22 22:59:00 +02:00
Daniel Roethlisberger
ee98c04b29
Add generic OCSP denial
2012-04-22 19:12:38 +02:00
Daniel Roethlisberger
4cfdef405a
Initial import of sslsplit-0.4.2
2012-04-13 14:47:30 +02:00
