Commit Graph

762 Commits

Author SHA1 Message Date
Soner Tari
ad1aa909e8 Convert a couple of timeout commands to recv, now testproxy errors out if conn end receives timeout command while connected
Clean up testproxy tests
2019-08-20 11:47:06 +03:00
Soner Tari
92aecf0bc3 Debug-print sqlite version 2019-08-13 10:12:20 +03:00
Soner Tari
e2a0c99768 Remove all type casts from child to parent ctxs 2019-08-10 15:35:28 +03:00
Soner Tari
009fe9f6ad Merge sslsplit develop changes 2019-08-08 12:23:04 +03:00
Soner Tari
12592bbf00 Fix null error strings with SSL_ERROR_SSL: libevent-2.1.11 pushes SSL_ERROR_SSL causing "Additional SSL error" 2019-08-08 12:15:08 +03:00
Soner Tari
600baa995e Improve LibreSSL support 2019-08-07 12:59:20 +03:00
Soner Tari
3e4ad49f70 Fix LibreSSL version for OPENSSL_NO_SHA0, SHA-0 support was removed in LIBRESSL_VERSION_NUMBER >= 0x20030001L 2019-08-05 14:19:35 +03:00
Soner Tari
08aba78815 Fix LibreSSL version for OPENSSL_init_crypto() support, fixes Travis build 2019-08-05 13:02:26 +03:00
Soner Tari
4a05b4bf05 Increase the default RSA key size to 2048 2019-08-05 12:32:17 +03:00
Soner Tari
df48b3e28d Improve LibreSSL support 2019-08-04 12:09:08 +03:00
Soner Tari
dabc9c7b20 Increase the default RSA key size to 2048 2019-08-04 11:15:05 +03:00
Soner Tari
0d5af14325 Improve exit status handling, merged from sslsplit 2019-08-03 15:31:40 +03:00
Soner Tari
58821e99cf Fix cert_new_load() load chain test failure with LibreSSL 2.9.2: LIBRESSL_VERSION_NUMBER >= 0x20902000L supports SSL_CTX_get0_chain_certs() 2019-08-02 17:29:31 +03:00
Soner Tari
6072cf7bd5 Fix opts test on osx 2019-08-02 13:42:09 +03:00
Soner Tari
52802b6291 Add new opts tests 2019-08-02 13:21:01 +03:00
Soner Tari
fc153338ca Free tmp strs used to clone global opts into proxyspecs asap
Fix English
2019-07-31 14:46:04 +03:00
Soner Tari
1a7dc673bf Fix libressl macros: OPENSSL_VERSION_NUMBER on OpenBSD is always 0x20000000L (> 0x10100000L) 2019-07-31 01:41:24 +03:00
Soner Tari
6cdec55509 Enable Force/Min/MaxSSLProto options with LibreSSL 2.7.2+ (OpenBSD 6.3) 2019-07-31 00:25:57 +03:00
Soner Tari
001420a7ab Fix travis and OpenBSD builds 2019-07-30 23:08:24 +03:00
Soner Tari
231806ea75 Add MinSSLProto/MaxSSLProto options
Fix memout handling
2019-07-30 21:46:18 +03:00
Soner Tari
5961913828 Fix ocsp uri check 2019-07-30 21:00:05 +03:00
Soner Tari
b9b1744568 Fix str var free in passsite_str 2019-07-25 21:24:30 +03:00
Soner Tari
fdcf138150 Put option dbg logs in between DEBUG_OPTS macro
Assume ownership of further code
Clean up
2019-07-23 12:55:06 +03:00
Soner Tari
3c124966e4 Update documentation 2019-07-22 11:24:53 +03:00
Soner Tari
091acf79ab Fix autossl, after changes to reuse parent srvdst as dst 2019-07-21 22:01:56 +03:00
Soner Tari
3cbcffcebc Reuse parent srvdst as dst of first child to avoid connecting to server twice, first conn was to get server cert for forging, so we xfer srvdst to first child after parent does not need it anymore 2019-07-20 22:29:08 +03:00
Soner Tari
78ba1e075c Debug print SSLproxy line on lp 2019-07-18 14:36:47 +03:00
Soner Tari
2cb6dd573e Remove lp binary 2019-07-18 12:28:52 +03:00
Soner Tari
e8f9f216a9 Add lp listening program and testproxy tests under extra 2019-07-18 11:48:15 +03:00
Soner Tari
c54cb627a1 Fix passthrough mode engage upon srvdst ssl error 2019-07-14 22:07:08 +03:00
Soner Tari
6b8b819daa Add sample struct proxyspec 2019-07-13 11:34:23 +03:00
Soner Tari
e1aac3a69d Fix main_check_opts 2019-07-13 11:33:26 +03:00
Soner Tari
8484c8b927 Fix handling of proxyspec struct closing brace 2019-07-12 22:36:52 +03:00
Soner Tari
c9769b0d89 Fix global opts lprocinfo 2019-07-12 16:03:22 +03:00
Soner Tari
f42e682f59 Fix unit tests 2019-07-12 15:52:36 +03:00
Soner Tari
58eb907d69 Separate global and proxyspec opts 2019-07-12 14:40:04 +03:00
Soner Tari
d6f0f4cdc7 Create proxyspec options 2019-07-08 21:49:06 +03:00
Soner Tari
57ae6f07a5 Update OCSP denied comments 2019-07-08 21:45:30 +03:00
Soner Tari
70fa08a36a Fix OCSP denied response 2019-07-03 02:10:51 +03:00
Soner Tari
3b25ea2e34 Fix http method validation: Compare 1 byte longer than method len, so that GET1 is not validated as GET 2019-07-02 22:30:40 +03:00
Soner Tari
a7d671169c Fix handling of HTTP Accept-Encoding 2019-06-18 10:23:50 +03:00
Soner Tari
d50bb0bfa6 Fix proto http child setup 2019-06-16 17:58:31 +03:00
Soner Tari
f6a8522d1e Enable -O2 optimization, remove -g
Clean up gitignore
Fix typos
2019-05-27 11:12:12 +03:00
Soner Tari
1c8a837df1 Fix FreeBSD support: Call available_fds() on FreeBSD too 2019-05-08 23:45:10 +03:00
Soner Tari
adee22db09
Fix FreeBSD support, pr #13 by @5u623l20
FreeBSD does not have getdtablecount() and needs netinet/in.h
2019-05-08 21:47:16 +03:00
Soner Tari
d1a3328c58 Differentiate PassSite option from Passthrough option: PassSite does not require Passthrough now
Remove redundant if conditions
2019-05-02 19:06:48 +03:00
Soner Tari
c146b8a0ec Make sure sni and ssl_names are not null, fixes signal 11 crash reported by @janusloo 2019-05-01 00:35:15 +03:00
Soner Tari
22ad78c8f9 Fix passthrough conn logging 2019-04-22 23:01:57 +03:00
Soner Tari
26a73d797d Fix passsite struct free 2019-04-21 01:46:40 +03:00
Soner Tari
c3abe74776 Add client filtering to PassSite option, per site filters can be defined using client IP addresses, users, and description keywords 2019-04-21 01:00:46 +03:00