Archives
/
SSLproxy
mirror of https://github.com/sonertari/SSLproxy
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
423 Commits
2 Branches
26 Tags
3.0 MiB
develop
master
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0
v0.7.0
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4
v0.8.5
v0.8.6
v0.9.0
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.5
v0.9.6
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '0d38bca4e0'
${ noResults }
Commit Graph

423 Commits (0d38bca4e0b071d20da59316449f02b12f71a5fb)
 

Author SHA1 Message Date
Daniel Roethlisberger 3231c9c031 Record the actual XNU version detected 10 years ago
Daniel Roethlisberger 22abde706b Initialize af and addr even though not strictly necessary 
The state machine makes sure that both af and addr are written to before
they are being read.  However, to silence compiler warnings, it does not
hurt to explicitly initialize af and addr anyway.  This gets rid of the
following spurious compiler warnings:

    opts.c: In function 'proxyspec_parse':
    opts.c:380:8: warning: 'af' may be used uninitialized in this function [-Wmaybe-uninitialized]
         af = sys_sockaddr_parse(&spec->connect_addr,
            ^
    opts.c:316:8: warning: 'addr' may be used uninitialized in this function [-Wmaybe-uninitialized]
         af = sys_sockaddr_parse(&spec->listen_addr,
            ^

Reported by:	Thomas Klausner
Issue:		#78
 10 years ago
Daniel Roethlisberger 0ebfcc9491 Merge branch 'issue/76' into develop 10 years ago
Daniel Roethlisberger 62cd0b8af6 Update list of contributors 10 years ago
Daniel Roethlisberger 6a78aeed2d Minor rewording 10 years ago
Daniel Roethlisberger 692dccfeae Merge branch 'clarify-linux-REDIRECT' of https://github.com/fd0/sslsplit into issue/76 10 years ago
Daniel Roethlisberger 20ea783cf7 Add XNU header selection fallback 
If the proper headers matching either the reported XNU version or OS X
version exactly cannot be found, use the latest headers that SSLsplit
knows about.  This fixes build on new releases of OS X that have no
source code published by Apple yet.
 10 years ago
Daniel Roethlisberger 91da4674e5 Update copyright, license and tagline 
-   Update copyright to 2015
-   Remove the non-standard "unmodified" from the 2-clause BSD license
-   Remove scalable from the tagline to avoid misinterpretations
 10 years ago
Alexander Neumann 925209ef4f Add hints for using Linux iptables REDIRECT target 10 years ago
Adam Jacob Muller 9267cf9bb4 add support for: 
%f - dest address
%h - dest port
%t - source address
%v - source port

format specifiers to pathspec
 10 years ago
Daniel Roethlisberger bb071336e0 Escape # in shell invocation 
This fixes the following make error on Mac OS X versions that we don't
explicitly support yet due to missing sources:

    GNUmakefile:55: *** unterminated call to function `shell': missing `)'.
    Stop.

Reported by:	Justin Garrick
 10 years ago
Daniel Roethlisberger c9aa840214 Quote dollar signs in shell invocation 
Reported by:	Justin Garrick
 10 years ago
Daniel Roethlisberger b8d8af7b29 Document the limitations of passthrough mode (-P) 10 years ago
Daniel Roethlisberger 4f0a019d5a Mention TravisCI and be explicit about branching 10 years ago
Daniel Roethlisberger f16783cee2 Move cert writer to logger thread using privsep 
Make -w and -W work in conjunction with dropping privileges and
chrooting by moving the cert writer code to a separate logger thread and
using the privsep framework to open the files if they do not exist
already.

Issue:		#70
 10 years ago
Daniel Roethlisberger 3662eeae50 Update documentation 10 years ago
Daniel Roethlisberger 27cf6c90e7 Merge branch 'feature/genstore' into develop 10 years ago
Daniel Roethlisberger 3da7407f14 Use same hash algo in RSA sigs as orig cert uses 10 years ago
Daniel Roethlisberger 6ec6c56ded Refactored -w/-W and improved docs 10 years ago
Daniel Roethlisberger 11f6742bff Add convenience functions for printing SHA1 values 10 years ago
Daniel Roethlisberger 7f378251e8 Update documentation 10 years ago
Daniel Roethlisberger 160fd991e0 Merge branch 'genstore' of https://github.com/psychomario/sslsplit into feature/genstore 10 years ago
PsychoMario 3aff928daf moved key output to main.c, caught some bugs 10 years ago
Daniel Roethlisberger 8422c6b478 Minor code cleanup of ssl_key_identifier_sha1() 10 years ago
PsychoMario b34336ab4b moved to develop branch 10 years ago
Daniel Roethlisberger 8b0b1d0226 Add ssl_key_identifier_sha1() utility function 
Issue:		#67
 10 years ago
PsychoMario a83cd68605 stored fpr as char* in ctx 10 years ago
PsychoMario 1736564b32 error handling 10 years ago
PsychoMario 5d7c52cde1 fix manpage 10 years ago
PsychoMario 4f310a877a implemented -W to write original certs 10 years ago
PsychoMario a7e2d99b39 added logging of fingerprints, uppercased names 10 years ago
PsychoMario 13dce0aa35 moved write to pxy_srccert_create, -X to -w, opts_free use 10 years ago
PsychoMario 73042d4daa fix mutual exclusivity, sprintf->asprintf 10 years ago
PsychoMario 61d5186864 added exclusivity with -K, man page and -h 10 years ago
PsychoMario cbb2a179f9 naive implementation with -X, no help, validation, logging 10 years ago
Daniel Roethlisberger d6b11f61b7 Clarify needed permission to open /dev/pf et al for reading 
Issue:		#66
Reported by:	Nikolay Khodov
 10 years ago
Daniel Roethlisberger 39e9c898e5 Move default cipher suite spec to defaults.h 10 years ago
Daniel Roethlisberger 0a6ca2ac98 Update licensing information 10 years ago
Daniel Roethlisberger 521adb7275 Format file refs with backticks 10 years ago
Daniel Roethlisberger e6dc9db6a4 Fix markdown links 10 years ago
Daniel Roethlisberger f2ff2ec9f5 Link to Github author pages 10 years ago
Daniel Roethlisberger b8ecbcd773 Split out AUTHORS.md and HACKING.md from README.md 10 years ago
Daniel Roethlisberger b8213e756d Merge branch 'feature/privsep' into develop 
Conflicts:
	NEWS.md
	main.c
	sslsplit.1
 10 years ago
Daniel Roethlisberger 61cd0fb541 SSLsplit 0.4.10 release 10 years ago
Daniel Roethlisberger 5ac565f5df Note that -j impacts -S and -F 10 years ago
Daniel Roethlisberger 008821cfca Update NEWS.md 10 years ago
Daniel Roethlisberger ab466aafb7 Allow -u root with pf proxyspecs on OS X 10 years ago
Daniel Roethlisberger f076336e0b Don't allow -u on Mac OS X with pf proxyspecs 
Apple checks EUID==0 on ioctl(/dev/pf), whereas OpenBSD and FreeBSD only
check permissions on open(/dev/pf).  This means that on OS X, it is not
possible to open /dev/pf, drop privileges, and send an ioctl to the file
descriptor opened earlier with EUID==0.  It also means Apple broke the
Unix way of dealing with device nodes - why are there file permissions
on /dev/pf when they later enforce EUID==0 on use, thereby breaking
basic Unix mechanisms?  Work around this by disallowing -u with pf
proxyspecs and by not automatically dropping to nobody on Mac OS X.

Issue:		#65
Reported by:	Vladimir Marteev
 10 years ago
Daniel Roethlisberger c4b22efa5a Fix segmentation fault for aborted connections 10 years ago
Daniel Roethlisberger 9341f25e6d Explicitly support Yosemite 10.10.1 with XNU 2782.1.97 10 years ago