Commit Graph

297 Commits (5fd1d7de9cc163a73f10b626da2b656860e98615)
 

Author SHA1 Message Date
wjensen cc0b57d341 Fix memory leaks in ssl_x509_load() and ssl_key_load(), remove unnecessary condition in ssl_x509chain_load() 10 years ago
Daniel Roethlisberger 3579fb6891 Merge branch 'sys_proc_info' of git://github.com/fix-macosx/sslsplit into issue/54 10 years ago
Daniel Roethlisberger 40a2b7c2c3 Merge branch 'issue/53' 10 years ago
Daniel Roethlisberger d9d8674792 Fix memory leak in libproc lookup code 10 years ago
Daniel Roethlisberger f8867368ee Detect presence of Darwin libproc.h 10 years ago
Landon Fuller afd32151d8
Merge branch 'sys_proc_info' into logspec_path_support 10 years ago
Landon Fuller 5225ec50b7
Merge branch 'nat_local_pid' into sys_proc_info 10 years ago
Landon Fuller 6e860472d1
Remove debugging statement. 10 years ago
Landon Fuller bea605d7ca
Update the man page to include the -F option and its logspec directives. 10 years ago
Landon Fuller 7ce301a60f
Fix incorrect format specifiers used in the -F usage example. 10 years ago
Landon Fuller be4be4a054
Merge branch 'sys_proc_info' into logspec_path_support 10 years ago
Landon Fuller afe6b87d80
Merge branch 'nat_local_pid' into sys_proc_info 10 years ago
Landon Fuller 137d10aa6e
Define HAVE_DARWIN_LIBPROC on Darwin. 10 years ago
Landon Fuller 02c6e6e605
Adopt the new oom_die() usage. 10 years ago
Landon Fuller a4c518c8a0
Merge remote-tracking branch 'origin/fix-macosx' into logspec_path_support 10 years ago
Landon Fuller efca8d73c9
Remove debugging statement. 10 years ago
Landon Fuller 81bf954c17
Merge commit '5ed49c498596995c79a5b7fda3d1ee1eb09ce8ec' into sys_proc_info 10 years ago
Landon Fuller fe5eb66b53
Merge commit '9204418c806fc85ba04c3650dc4002bd440083ca' into nat_local_pid 10 years ago
Daniel Roethlisberger 2de17692f0 Avoid casting !NULL to ptr types to silence clang 10 years ago
Daniel Roethlisberger 375bf2a13c Clarify comment about logging 10 years ago
Daniel Roethlisberger 206c688219 Refactor SSL/TLS debug code 10 years ago
Daniel Roethlisberger 601cdf5b52 Add SSL/TLS protocol selection debug code 10 years ago
Daniel Roethlisberger 6b0e47dc89 Allow more control over used SSL/TLS versions
Add -r to force a specific SSL/TLS protocol version.
Add -R to disable one or several SSL/TLS protocol versions.
Replace WANT_SSLV2_CLIENT and WANT_SSLV2_SERVER to WITH_SSLV2.

Issue:		#30
Reported by:	@Apollo2342
10 years ago
Daniel Roethlisberger 53e3d593c8 Move build status into h1 10 years ago
Daniel Roethlisberger 67ed768fec Migrate documentation to markdown
Issue:		#33
10 years ago
Daniel Roethlisberger 50001e5458 Avoid apparently common misunderstandings 10 years ago
Daniel Roethlisberger 0648f84bfc Remove legacy TODO file; move to Github issues 10 years ago
Daniel Roethlisberger fb2841f645 Zero allocated elements before initializing them
For some error conditions, the error handler depends on
ctx->thr[idx]->dnsbase to be zeroed expicitly after allocation.
To prevent this type of error, zero all allocated memory even
though it will get written to in any case.
10 years ago
Daniel Roethlisberger 508435d929 Use correct pointer type in sizeof() 10 years ago
Daniel Roethlisberger 8dbea83b21 Prevent malloc(0) when ssl_x509_names() returns no names 10 years ago
Daniel Roethlisberger 259d470498 Use -I instead of -isystem with clang-analyzer 10 years ago
Daniel Roethlisberger d0665377ee Remove WGET_FLAGS from developer targets 10 years ago
Daniel Roethlisberger a299d7e3f3 Add unit tests for ssl_x509_subject() and ssl_x509_subject_cn() 10 years ago
Daniel Roethlisberger eca1ac9a5e Rewrite ssl_x509_subject_cn() error handling 10 years ago
Daniel Roethlisberger c210641783 Don't add XNU includes to cppcheck invocation 10 years ago
Daniel Roethlisberger 76aab3b816 Fix X509_NAME_get_text_by_NID() error handling 10 years ago
Daniel Roethlisberger 5219d494f3 Protect session cache calls from sess == NULL 10 years ago
Daniel Roethlisberger 78a573121d Add some CPPFLAGS to cppcheck arguments 10 years ago
Daniel Roethlisberger b9ab5a03e6 SSLsplit 0.4.9 release 10 years ago
Daniel Roethlisberger fcb64e85e7 Make SSLv2 support opt-in instead of opt-out
Migrate knobs from DISABLE_SSLV2_CLIENT and DISABLE_SSLV2_SERVER to
WANT_SSLV2_CLIENT and WANT_SSLV2_SERVER and remove the
DISABLE_SSLV2_SESSION_CACHE knob entirely, automatically including the
respective code if SSLv2 support is compiled into SSLsplit.
10 years ago
Daniel Roethlisberger edf1dac8fa Improve manual page re protocols and scalability
Issue:		#42
10 years ago
Daniel Roethlisberger 769fbd042d Filter HSTS response headers to allow cert override
Also remove HTTP Strict Transport Security (HSTS, RFC 6797) headers from
HTTP responses.  With HSTS active, the user is not allowed to accept
untrusted certificates.
10 years ago
Daniel Roethlisberger cc6cb59485 Rewrite Mac OS X support to use proper XNU headers
Move from one set of headers per major OS X release to one set of
headers per XNU release.  Fetch the header files from Apple's official
Open Source site instead of GitHub in the fetchdeps developer target.
As a side effect, 10.6.x is now supported as well (untested), and proper
headers are used for 10.10.

Issue:		#39
10 years ago
Daniel Roethlisberger 001615c53b Update khash.h to latest klib master 10 years ago
Daniel Roethlisberger b1a7b11aea Don't depend on the space when parsing HTTP headers 10 years ago
Daniel Roethlisberger d85e5ddbe2 Disable SSLv2 support by default 10 years ago
Daniel Roethlisberger d6f2fa067d Update TODO and refer to github issues 10 years ago
Daniel Roethlisberger 0a225ae65c Update documentation after merging pull req #35 10 years ago
Daniel Roethlisberger 42efb4a980 Slightly improve user experience for new option -m 10 years ago
Daniel Roethlisberger ee9d434cac Further improving OOM handling in early stages of main() 10 years ago