Archives
/
SSLproxy
mirror of https://github.com/sonertari/SSLproxy
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
669 Commits
2 Branches
26 Tags
3.0 MiB
develop
master
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0
v0.7.0
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4
v0.8.5
v0.8.6
v0.9.0
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.5
v0.9.6
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '76a599d464'
${ noResults }
Commit Graph

669 Commits (76a599d464cdff5c498221808c45fe750487a96b)
 

Author SHA1 Message Date
Soner Tari 76a599d464 Put the getdtablecount() solution back in, otherwise sometimes, although rarely, we get "Error 24 on listener: Too many open files" nonstop, it's better to be safe(r) 5 years ago
Soner Tari 96ecd8e4c3 Pass BEV_OPT_THREADSAFE to bufferevent_socket_new() and similar functions, otherwise if we are out of fds, we get signal 10 or 6 crashes sometimes, nothing else seems to work 5 years ago
Soner Tari 3a6f797917 Do not forget to reset sqlite stmt if userdb is busy or locked, otherwise we get stuck and go out of fds too 
Check retval of event_add() calls
Reduce frequency of userdb atime updates by not updating until idle time reaches more than half of user timeout value, otherwise privsep server can get very busy causing locked userdb
Do not care about multiple matches of IP addresses in arp cache on OpenBSD either
Performance and code reuse improvements, simplifications
 5 years ago
Soner Tari 0d49ba56db Enable user auth support on Linux 5 years ago
Soner Tari 4f4b41d5ad Add user and proto validation info to connection logs 5 years ago
Soner Tari 56ddbcb5c8 Update version to 0.5.10 5 years ago
Soner Tari b6f2203495 Validate proxyspec protocols http, pop3, and smtp 5 years ago
Soner Tari f3e7a359a6 Update documentation with user auth feature 5 years ago
Soner Tari 6f37661772 Enable user auth for all supported protos or proxyspec types 5 years ago
Soner Tari fcd24a2cbe Do not terminate redirected connection until src outbuf is empty, otherwise 302 redirection may not have been sent yet 5 years ago
Soner Tari 1f451aa04d Change user db table name to users, change mac column name to ether 
Clean up
 5 years ago
Soner Tari c37bcc6de1 Add UserDBPath and UserTimeout options 5 years ago
Soner Tari fd52ba0c56 Refactor, handle error conditions, and clean up 5 years ago
Soner Tari cde3fbca3f Redirect user to login page and redirect again to orig target after successful authentication, currently supported only on OpenBSD 
Get ethernet address and compare with the one in userdb, on each conn setup
Create user_auth options
Rename and clean-up
 5 years ago
Soner Tari fb25c45c66 Clean-up 5 years ago
Soner Tari 304207e9e9 Add initial user database support using sqlite3 5 years ago
Soner Tari 19f68a2800 Fix documentation 6 years ago
Soner Tari 588122b512 Explain support for remote listening programs in README 6 years ago
Soner Tari e132b12d79 Support remote listening programs using ua and ra proxyspec options, address of remote listening program that decrypted packets are diverted to and address SSLproxy is listening for returned packets from remote listening program, respectively 6 years ago
Soner Tari c0a943beb6 Release v0.5.9 6 years ago
Soner Tari 87403615f9 Remove now unnecessary UNUSED attributes 6 years ago
Soner Tari 670f609d7a Refactor logging code and fix memory leak 6 years ago
Soner Tari 70a22f4515 Do not break the event loop if out of fds, instead properly check all retvals of libevent functions 
So remove getdtable*() solution
 6 years ago
Soner Tari f848248f54 Use better names and fix white space 6 years ago
Soner Tari d0687b3398 Fix double init of protoctx, memory leak 
Free vars where they are allocated, always
 6 years ago
Soner Tari 83468afb1f Fix ssl setup error handling, ssl ctx does not have any proto arg, so arg is always null at that point 6 years ago
Soner Tari 3f148cf3b9 Move thrmgr->conn_count inc for conn id back to conn acceptcb, because acceptcb runs on thrmgr thread which is single threaded, so there is no multithreading issues there 6 years ago
Soner Tari 360b951ade Prevent possible multithreading issues, which would not cause crashes but incorrect conn ids and memory leaks due to broken thread conn linked lists 6 years ago
Soner Tari 3d1ed7c8d2 Fix the link for The Risks of SSL Inspection, markdown doesn't like the new line in between caption and link 6 years ago
Soner Tari 3fd02eee9d Use available_fds() on osx to detect out of file descriptors condition, borrowed from opensmtpd 6 years ago
Soner Tari e1d96a874e Disable getdtablecount() on osx, temporarily 6 years ago
Soner Tari 7847486bc4 Try to fix travis osx build, osx does not have getdtablecount() either 6 years ago
Soner Tari 77b81aa45f Fix travis osx build 6 years ago
Soner Tari 52d37297b6 Update with sslsplit develop changes, especially content logging 
Change SIGHUP to behave like SIGUSR1
 6 years ago
Soner Tari 12ecc96648 Assume co-ownership of refactored and new pxy and proto source files by adding copyright line below the original copyright line 6 years ago
Soner Tari 87eb6ce004 Move conn end free function callback to conn end struct, proto ctx should not keep track of such conn end details, conn end should know which function to be called to free itself, we may have different protos on different ends of the same conn 
Improve and clean up
 6 years ago
Soner Tari 5351e78740 Combine term and enomem handling code and improve 6 years ago
Soner Tari ca959ca391 Do not call topmost callback functions directly, use them in bufferevent setup only, otherwise can possibly cause double free of ctx 
Run preexec and postexec logging and/or stats code when calling interface callback functions directly, they are mostly called in edge cases, but otherwise we would miss related logs and/or stats
 6 years ago
Soner Tari 8c7b8bafcf Fix build warning with LibreSSL 2.8.2, id is const now 6 years ago
Soner Tari 62b4760930 Improve messages for omitted tests 
Do not remove repo file session.pem
 6 years ago
Soner Tari 3d668aabb6 Minor improvements 6 years ago
Soner Tari cd78d881c8 Fix passthrough mode double free crash and free any/all data of previous proto asap 
Improve and clean up
 6 years ago
Soner Tari d4a209cbfb Avoid redundant void to ctx type casts by passing ctx explicitly 6 years ago
Soner Tari e8e8071772 Defer conn free until the exit code of topmost callback functions, for both parent and child connections, this is necessary to handle error conditions correctly and terminate connections gracefully 
So introduce term flags in ctx and replace free functions with term functions to raise the term flag, this approach enables us to terminate connection anywhere in the code without causing use after free crashes
Improve and clean up
 6 years ago
Soner Tari c085cafe0f Rename srv_dst to srvdst 
Clean up
 6 years ago
Soner Tari adb99db518 Handle out of memory conditions correctly 
Do not do anything else with ctx while returning from topmost callback functions if it is freed
Rename functions, improve, and clean up
 6 years ago
Soner Tari cbb9d593c4 Do not do anything else with ctx while returning from topmost callback functions if it is freed 
Handle out of memory conditions correctly
 6 years ago
Soner Tari 2aeec751e0 Handle out of memory conditions correctly 6 years ago
Soner Tari 2f0e574f09 Fix autossl, but Evolution client sometimes does not send ehlo, especially after user rejects self-signed cert, which needs further investigation 
And other improvements
 6 years ago
Soner Tari c91d569723 Improve debug logging, log proto name on connect/disconnect 
Rename vars and functions
Improve and clean up
 6 years ago