Commit Graph

19 Commits (42efb4a9801dc94a56cf920cfaa1144129342246)

Author SHA1 Message Date
Daniel Roethlisberger 85b177f6b0 Special device nodes may be needed for -j to work 10 years ago
Daniel Roethlisberger 3226d9bfcf No longer chroot() by default when run as root
No longer implicitly use -j /var/empty by default and document clearly
the implications of using -j with -S and/or sni proxyspecs.

Issue:		#21
11 years ago
Daniel Roethlisberger 6643d832d9 Add experimental support for pf on Mac OS X
Support pf rdr on Mac OS X 10.7, 10.8 and 10.9 by including the missing
Apple headers in the source tree and enable private Apple code.  Since
we are using an interface marked private by Apple, this code is very
experimental.

Issue:		#15
Reported by:	Amit Chowdhary
11 years ago
Daniel Roethlisberger ca923ee7f1 Update copyright notices to 2014 11 years ago
Daniel Roethlisberger 8cc81c7f1c FreeBSD pf also has divert-to since 9.0-RELEASE 11 years ago
Daniel Roethlisberger 0987300e28 Improve IPFW and pf wording in the documentation 11 years ago
Daniel Roethlisberger 68a60b9734 Update manual page for OpenBSD
Add configuration examples for both old and new OpenBSD pf syntax and
give an example of using OpenBSD pf divert sockets for redirection.
Based on the OpenBSD port patchset.

Reported by:	Stuart Henderson
11 years ago
Daniel Roethlisberger c73ce64c16 Update README and manual page for HPKP prevention 11 years ago
Daniel Roethlisberger c972501063 Update copyright notices 12 years ago
Daniel Roethlisberger 807b7c1d3b Fix typo in manpage 12 years ago
Daniel Roethlisberger 62af96e413 Clarify when it is preferred to use SNI proxyspecs 12 years ago
Daniel Roethlisberger 3742404fe9 Update ECDH default curve name in manual page 13 years ago
Daniel Roethlisberger 7ad1deb680 Document intended use of SSLsplit 13 years ago
Daniel Roethlisberger 6d58824de2 Fix typo in manual page 13 years ago
Daniel Roethlisberger 2d1ad219b9 Change default cipher suite to "ALL:-aNULL" 13 years ago
Daniel Roethlisberger 1bd2872b20 DH group parameters are also loaded from -c 13 years ago
Daniel Roethlisberger 7aca81a7b7 Improve CA cert/key config code and docs
Make -c and -k functional twins by also loading DH params in -c and by
fixing certificate loading in -k.  Improve the documentation for both
switches and simplify the SYNOPSIS in sslsplit(1).
13 years ago
Daniel Roethlisberger ee98c04b29 Add generic OCSP denial 13 years ago
Daniel Roethlisberger 4cfdef405a Initial import of sslsplit-0.4.2 13 years ago