Soner Tari
f3e7a359a6
Update documentation with user auth feature
2019-03-06 22:43:43 +03:00
Soner Tari
6f37661772
Enable user auth for all supported protos or proxyspec types
2019-03-06 01:09:02 +03:00
Soner Tari
fcd24a2cbe
Do not terminate redirected connection until src outbuf is empty, otherwise 302 redirection may not have been sent yet
2019-03-05 19:11:08 +03:00
Soner Tari
1f451aa04d
Change user db table name to users, change mac column name to ether
...
Clean up
2019-03-02 03:44:14 +03:00
Soner Tari
c37bcc6de1
Add UserDBPath and UserTimeout options
2019-03-02 02:52:48 +03:00
Soner Tari
fd52ba0c56
Refactor, handle error conditions, and clean up
2019-03-02 02:04:53 +03:00
Soner Tari
cde3fbca3f
Redirect user to login page and redirect again to orig target after successful authentication, currently supported only on OpenBSD
...
Get ethernet address and compare with the one in userdb, on each conn setup
Create user_auth options
Rename and clean-up
2019-03-01 02:08:24 +03:00
Soner Tari
fb25c45c66
Clean-up
2019-02-16 17:52:57 +03:00
Soner Tari
304207e9e9
Add initial user database support using sqlite3
2019-02-16 17:29:14 +03:00
Soner Tari
19f68a2800
Fix documentation
2019-02-03 22:48:20 +03:00
Soner Tari
588122b512
Explain support for remote listening programs in README
2019-01-07 01:05:48 +03:00
Soner Tari
e132b12d79
Support remote listening programs using ua and ra proxyspec options, address of remote listening program that decrypted packets are diverted to and address SSLproxy is listening for returned packets from remote listening program, respectively
2019-01-06 18:09:17 +03:00
Soner Tari
c0a943beb6
Release v0.5.9
2018-12-11 21:58:45 +03:00
Soner Tari
87403615f9
Remove now unnecessary UNUSED attributes
2018-12-01 00:36:03 +03:00
Soner Tari
670f609d7a
Refactor logging code and fix memory leak
2018-11-30 14:28:51 +03:00
Soner Tari
70a22f4515
Do not break the event loop if out of fds, instead properly check all retvals of libevent functions
...
So remove getdtable*() solution
2018-11-30 02:49:37 +03:00
Soner Tari
f848248f54
Use better names and fix white space
2018-11-10 23:33:12 +03:00
Soner Tari
d0687b3398
Fix double init of protoctx, memory leak
...
Free vars where they are allocated, always
2018-11-10 20:46:39 +03:00
Soner Tari
83468afb1f
Fix ssl setup error handling, ssl ctx does not have any proto arg, so arg is always null at that point
2018-11-10 19:22:16 +03:00
Soner Tari
3f148cf3b9
Move thrmgr->conn_count inc for conn id back to conn acceptcb, because acceptcb runs on thrmgr thread which is single threaded, so there is no multithreading issues there
2018-11-09 12:32:16 +03:00
Soner Tari
360b951ade
Prevent possible multithreading issues, which would not cause crashes but incorrect conn ids and memory leaks due to broken thread conn linked lists
2018-11-09 02:10:08 +03:00
Soner Tari
3d1ed7c8d2
Fix the link for The Risks of SSL Inspection, markdown doesn't like the new line in between caption and link
2018-11-06 21:44:25 +03:00
Soner Tari
3fd02eee9d
Use available_fds() on osx to detect out of file descriptors condition, borrowed from opensmtpd
2018-11-03 20:57:50 +03:00
Soner Tari
e1d96a874e
Disable getdtablecount() on osx, temporarily
2018-11-03 20:23:54 +03:00
Soner Tari
7847486bc4
Try to fix travis osx build, osx does not have getdtablecount() either
2018-11-03 19:23:13 +03:00
Soner Tari
77b81aa45f
Fix travis osx build
2018-11-03 18:50:49 +03:00
Soner Tari
52d37297b6
Update with sslsplit develop changes, especially content logging
...
Change SIGHUP to behave like SIGUSR1
2018-11-03 18:23:31 +03:00
Soner Tari
12ecc96648
Assume co-ownership of refactored and new pxy and proto source files by adding copyright line below the original copyright line
2018-10-30 12:42:52 +03:00
Soner Tari
87eb6ce004
Move conn end free function callback to conn end struct, proto ctx should not keep track of such conn end details, conn end should know which function to be called to free itself, we may have different protos on different ends of the same conn
...
Improve and clean up
2018-10-29 21:38:42 +03:00
Soner Tari
5351e78740
Combine term and enomem handling code and improve
2018-10-29 01:59:26 +03:00
Soner Tari
ca959ca391
Do not call topmost callback functions directly, use them in bufferevent setup only, otherwise can possibly cause double free of ctx
...
Run preexec and postexec logging and/or stats code when calling interface callback functions directly, they are mostly called in edge cases, but otherwise we would miss related logs and/or stats
2018-10-28 23:51:22 +03:00
Soner Tari
8c7b8bafcf
Fix build warning with LibreSSL 2.8.2, id is const now
2018-10-27 00:30:09 +03:00
Soner Tari
62b4760930
Improve messages for omitted tests
...
Do not remove repo file session.pem
2018-10-26 18:13:17 +03:00
Soner Tari
3d668aabb6
Minor improvements
2018-10-25 14:58:18 +03:00
Soner Tari
cd78d881c8
Fix passthrough mode double free crash and free any/all data of previous proto asap
...
Improve and clean up
2018-10-23 04:02:00 +03:00
Soner Tari
d4a209cbfb
Avoid redundant void to ctx type casts by passing ctx explicitly
2018-10-23 00:18:48 +03:00
Soner Tari
e8e8071772
Defer conn free until the exit code of topmost callback functions, for both parent and child connections, this is necessary to handle error conditions correctly and terminate connections gracefully
...
So introduce term flags in ctx and replace free functions with term functions to raise the term flag, this approach enables us to terminate connection anywhere in the code without causing use after free crashes
Improve and clean up
2018-10-22 23:13:42 +03:00
Soner Tari
c085cafe0f
Rename srv_dst to srvdst
...
Clean up
2018-10-22 16:12:07 +03:00
Soner Tari
adb99db518
Handle out of memory conditions correctly
...
Do not do anything else with ctx while returning from topmost callback functions if it is freed
Rename functions, improve, and clean up
2018-10-22 15:30:18 +03:00
Soner Tari
cbb9d593c4
Do not do anything else with ctx while returning from topmost callback functions if it is freed
...
Handle out of memory conditions correctly
2018-10-22 01:57:15 +03:00
Soner Tari
2aeec751e0
Handle out of memory conditions correctly
2018-10-22 00:18:27 +03:00
Soner Tari
2f0e574f09
Fix autossl, but Evolution client sometimes does not send ehlo, especially after user rejects self-signed cert, which needs further investigation
...
And other improvements
2018-10-21 22:01:46 +03:00
Soner Tari
c91d569723
Improve debug logging, log proto name on connect/disconnect
...
Rename vars and functions
Improve and clean up
2018-10-21 00:25:01 +03:00
Soner Tari
1374d37722
Decouple stats from proto code
...
Move connect logging to the topmost callback functions, amap
Improve and clean up
2018-10-20 15:29:51 +03:00
Soner Tari
0c2d12f35d
Decouple connect logging from proxy code
...
Improve and clean up
2018-10-20 02:03:21 +03:00
Soner Tari
3e0cbc2905
Rearrange and clean up
2018-10-19 15:03:36 +03:00
Soner Tari
59c11017bd
Refactor to move common logging and stats code to topmost callback functions
...
Log only orig content in the topmost readcb
Improve and clean up
2018-10-19 01:31:10 +03:00
Soner Tari
6c4dff69eb
Move proto specific structs from h to c files
2018-10-18 02:43:27 +03:00
Soner Tari
13040639b7
Add static and NONNULL attrib
...
Rename, improve, and clean up
2018-10-18 02:00:49 +03:00
Soner Tari
f681b31497
Decouple ssl from tcp and other protocols
...
Improve and clean up
2018-10-17 16:28:21 +03:00
