Archives
/
SSLproxy
mirror of https://github.com/sonertari/SSLproxy
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,030 Commits
2 Branches
26 Tags
3.0 MiB
develop
master
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0
v0.7.0
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4
v0.8.5
v0.8.6
v0.9.0
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.5
v0.9.6
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '77df635afa'
${ noResults }
Commit Graph

1030 Commits (77df635afab2bc5d71169247569fc83c0fdc505c)
 

Author SHA1 Message Date
Soner Tari ee41c72666 Add tls13 support 
Add e2e tests for tls13 too
 4 years ago
Soner Tari 9da7437919 Release v0.8.0 4 years ago
Soner Tari 826b612c1e Fix build version 
Improve documentation
 4 years ago
Soner Tari 3fe0e5f1eb Move tmp global opts vars to new tmp struct 
The global opts strings in this new tmp struct are used while cloning
global opts into proxyspec opts. A var of this type is passed around as
a flag to indicate if these opts are global (if non-NULL), so should be
stored in that struct and used as such, or proxyspec specific (if NULL),
so should not be used as global. This var is temporary, hence freed
immediately after configuration is complete.
Also improve and clean up.
 4 years ago
Soner Tari 6abfa01252 Free all structs created for testing 4 years ago
Soner Tari 59ce88b1ac Move tmp proxyspec vars to new tmp struct 
These vars are used while configuring proxyspecs, and freed right after
they are used. So they should not be in proxyspec struct.
Refactor accordingly.
 4 years ago
Soner Tari 4a1980d4a5 Add check unit tests for protocol validation and util_get_first_word_len() 
Also improve and clean up
 4 years ago
Soner Tari e3b0ba94d8 Accept space, tab, cr, and nl chars after POP3 and SMTP commands 
POP3 clients may and do append CRLF to commands.
So use the new util_get_first_word_len() function.
 4 years ago
Soner Tari 01577657fd Clean up DOCKER directives 4 years ago
Soner Tari ef2edff60a Improve string comparisons 
We need case-insensitive comparison validating POP3 and SMTP commands.
Define macro function to check string equality.
 4 years ago
Soner Tari ac4285cef1 Fix POP3 and SMTP protocol validation, thanks to the new testproxy e2e tests 
Add testproxy e2e tests for POP3 and SMTP protocol validation.

We have detected that POP3 and SMTP protocol validation was broken
thanks to these new testproxy e2e tests. This is yet another example why
e2e tests are important.
 4 years ago
Soner Tari f3ac5ee4f2 Move passsite flag to sslctx 
The passsite flag is ssl specific.
 4 years ago
Soner Tari f8580d6ac7 Update news 
This is the first SSLproxy specific changelog.
 4 years ago
Soner Tari 313da5cfca Add -A DefaultLeafCert option 
Rename LeafCerts to LeafKey, TargetCertDir to LeafCertDir, CRL to
LeafCRLURL
 4 years ago
Soner Tari aba07a53ee Disable conn ids unless debugging 
We don't need parent or child ids unless debugging. IDLE and EXPIRED
conn logs do not need to report ids either. Ids are useful only in
detailed debug logs.
 4 years ago
Soner Tari 5285b9e433 Fix valgrind REDIR warning about strncpy(), use memcpy() instead 
REDIR: 0x562c100 (libc.so.6:__strncpy_ssse3) redirected to 0x4c32fb0
(strncpy)
The src strings are not NULL terminated at the correct positions.
 4 years ago
Soner Tari 11f92e3ce8 Add unique child id, set to the children count of parent conn 
This is necessary to uniquely identify child conns. The src fd of child
conns was possibly not unique. We use this id in debug logs only.
Also relocate the update code related with this id.
 4 years ago
Soner Tari 519e82a624 Warn unused result of max() 4 years ago
Soner Tari be80523036 Use the new inline max() function instead of MAX() macro function in sslproxy 
Do not pass pxy_thr_print_children() or bufferevent_getfd() to MAX() or
util_max() macro functions as params, or else they are called twice.
Since MAX() macro call duplicates params, do not call it nested either,
or else we get very long macro expansions.
 4 years ago
Soner Tari e63d6dd3aa Remove BEV_OPT_THREADSAFE in lp too 
thrmgr and conn handling threads in lp are cleanly decoupled now.
 4 years ago
Soner Tari d611ec727d Do not close fd -1, true for tcp conns too 4 years ago
Soner Tari 8a96565d99 Zero out msg buf as in sslsplit 
ce5f409dbe
("Zero all bytes when passing file descriptors over AF_UNIX sockets",
2018-11-12)

Also, bufferevent_getfd() returns -1 if no file descriptor is associated
with the bufferevent.
 4 years ago
Soner Tari 128838c70f Fix -g flag for lp, use Mk/buildinfo.mk of sslproxy 
This is necessary to detect the .git folder at the project root. So
remove Mk/buildinfo.mk of lp.
 4 years ago
Soner Tari 3e706ea022 Fix leaks and errors reported by valgrind 
Free vars.
Finalize sqlite3 statements.
Close sqlite3 db.
Init memory.
Do not close fd -1.

Some of these may be harmless, but we fix them anyway. Now valgrind
reports 0 "lost" memory, but some "still reachable", both for sslproxy
and lp.
 4 years ago
Soner Tari 1d75bfb17f Fix a possible sync issue between thr load and conn children list on error 
Refactor and rename functions, struct fields, and vars
Simplify if conditions and fix/improve logs
Clean up
 4 years ago
Soner Tari 757ed35687 Do not use privsep to open socket for child listener 
We don't need a privsep call to open a socket for child listener,
because listener port of child conns are assigned by the system, hence
are from non-privileged range above 1024.
So the open privsep socket is used only to update user atime now.
 4 years ago
Soner Tari 14cfd3286b Update ctime and first atime on conn handling thr, not on thrmgr 
This offloads the thrmgr by saving a time() call.
Also remove an unnecessary NULL assignment.
 4 years ago
Soner Tari 71dff82305 Terminate conn on socket connect error 
And rename a function.
 4 years ago
Soner Tari 18c882ad37 Refactor and rename assign/attach conn to thr functions 
And fix comments.
 4 years ago
Soner Tari f069637fda Include errno.h in pxyconn.c too to fix travis issue 4 years ago
Soner Tari 61edeeedb1 Include errno.h, revert log.h to fix travis issue 4 years ago
Soner Tari 906d961168 Fix travis issue due to errno 
errno and EMFILE are provided by <unistd.h>, but we need log.h anyway,
which includes logger.h, and which includes <unistd.h> in turn.
 4 years ago
Soner Tari 6c5165fa6e Update lp with sslproxy changes and clean up 4 years ago
Soner Tari d3c3059c26 Remove ctx evbase and dnsbase 
We already have thr in conn ctx to access its evbase and dnsbase.
 4 years ago
Soner Tari 8786b9fda7 Remove pending ssl conns list and in_thr_conns flag 
We have carried almost all conn init tasks from thrmgr to conn handling
thread. So we immediately add the conn to the conn list of its thr,
which renders both pending ssl conns list and in_thr_conns flag useless.
 4 years ago
Soner Tari 98cda54c47 Reduce and improve debug logs 4 years ago
Soner Tari c8371e7b3d Decouple thrmgr and conn handling thr on error too 
Also add/fix comments, fix debug logs and mistakes.
 4 years ago
Soner Tari 229ea2fe0a Convert linked lists to doubly linked lists, so keep track of previous node 
The only time we go over the linked list is to check idle or expired
connections, or to print debug info. Otherwise, mostly what we need is
to add and remove list nodes. Removing a list node becomes a very simple
task if we keep track of the previous node too. So now we also keep
record of prev node, and update prev node as we add and remove nodes.
All three linked lists we use benefit from this data structure
improvement, making it very fast to remove a list node.

Another benefit of this change is that we don't need to identify conns
with their id numbers or child conns with their src fds. So now we
directly delete them, without needing to check their ids or fds.
 4 years ago
Soner Tari cc5d877711 Remove BEV_OPT_THREADSAFE 
thrmgr and conn handling threads are cleanly decoupled now. So we don't
need BEV_OPT_THREADSAFE anymore.
 4 years ago
Soner Tari f77a7630d5 Disable thr mutex 
Do we need a thr mutex? This mutex is for thread-safe access to
thr.load. But thrmgr read-accesses thr.load, and write-accesses are by
thr only. So can we really live without it?
 4 years ago
Soner Tari 8b27cfce95 Decouple code for thrmgr and conn handling threads, so create pxythr.c/h 4 years ago
Soner Tari aab56d42a9 Switch to conn handling thread even earlier 
So now we do a couple of expensive tasks on conn handling threads, not
on thrmgr: Add the conn to its thread conn list, check fd usage, nat
lookup dst, and make string src addr.
 4 years ago
Soner Tari 033cb732ac Decouple conn init from fd readcb 4 years ago
Soner Tari 191109951d Switch from thrmgr to connection handling thread asap 
This prevents possible multithreading issues between thrmgr and conn
handling threads. So we can remove and clean up the code and comments
related with such possible issues now. For example, we can add the conn
to its thread list earlier, and we can handle errors immediately, thanks
to this early switch to conn handling threads. This also helps achieve
cleaner code.
 4 years ago
Soner Tari 03453fc76b Refactor to free the buf asap 4 years ago
Soner Tari 0bfe5584e4 Simplify logs printed by *_main and *_main_va macros 
Since the *_main and *_main_va macros always pass 0 as fd, and the other
macros fd > 0, we can simplify the main macros.
 4 years ago
Soner Tari 05654e3bee Avoid possible crashes caused by passing NULL pointers to str*() functions 4 years ago
Soner Tari a1f24e26d0 Clean up 4 years ago
Soner Tari fd3aa5a394 Update lp with sslproxy changes, fix dst events 
Enable dst r/w events before socket connect.
Improve verbose debug logs using common header fields to better identify
connections.
Create function macros for fine* debug logs.
 4 years ago
Soner Tari 554fd3bd3a Improve code reuse, reduce code, clean up whitespace 4 years ago