94 Commits (ae69b21908e4a1af2eedab547ca9ed766372dfa4)

Author	SHA1	Message	Date
Soner Tari	4c8831bd90	Update with SSLsplit 0.5.1 changes, fix LibreSSL version issues ... Add VerifyPeer and AllowWrongHost options	7 years ago
Soner Tari	392c6be48c	Add SSLproxy copyright to -v output	7 years ago
Soner Tari	a1c5d05143	Add support for log priority to error logs, so syslogd prints the correct prio for error logs now	7 years ago
Soner Tari	179aa4fc8f	Close the conn if we are out of file descriptors, or libevent will crash us	7 years ago
Soner Tari	4bf27d09e5	Add RemoveHTTPReferer option, Referer causes redirection errors with some sites	7 years ago
Soner Tari	d52ee62079	Add RemoveHTTPAcceptEncoding option	7 years ago
Soner Tari	0b5ef8b14d	Mark critical errors as CRITICAL	7 years ago
Soner Tari	7748e3ec1b	Add conf file support, with -f command line option, supports a subset of all possible options	7 years ago
Soner Tari	1a6eab50a5	Tidy and clean logs up ... Add DEBUG_PROXY directive around all log_dbg_level_printf() and related lines Log stats to syslog, similar to error logs, so that it is simpler to rotate and parse -O w/o -g is failing bufferevent_socket_connect for parent dst, so either enable -O w/ -g, or disable -O w/o -g (-O2 is failing too) Refactoring	7 years ago
Soner Tari	ea6dc07248	Rename to sslproxy ... Reduce http headers to just one SSLproxy line	7 years ago
Soner Tari	1ae732f533	There are 3 dst bevs, writecbs of all of them may fire before connected event, so call eventcb first when that happens for each dst bevs. ... Check if srv_dst bev is NULL or not: Since both eventcb and writecb for srv_dst are enabled, either eventcb or writecb may get a NULL srv_dst bev, causing a crash with signal 10. Remove unnecessary evutil_closesocket() calls, they could close the fds twice, causing conn stalls	7 years ago
Soner Tari	67ddee1585	Import sslsplit-devel changes ... Add stats logs, initial Add SSLproxy_SrcAddr header field Clean-up	7 years ago
Soner Tari	5047df8cba	Fix some of the compiler warnings, rearrange, and clean-up	7 years ago
Soner Tari	9858928b73	Add debug levels, initial	7 years ago
Soner Tari	d033ea68dd	Plain TCP version is running good enough, next will try to switch the SSL on	7 years ago
Daniel Roethlisberger	29f44c3d64	Add autossl spec parsing tests and improve docs	8 years ago
Daniel Roethlisberger	25b096450d	Modernize DHE and ECDHE support ... Enable full strength DHE and ECDHE by default in order to allow modern browsers to connect without weak crypto warnings. Issue: #119 Reported by: @curioustwo	8 years ago
Daniel Roethlisberger	e632490888	Add exception handler to logger, exit on errors ... Add exception handler mechanism to logger and use that to exit cleanly when sslsplit fails to write to a log file or fails to open a log file. Issue: #113 Reported by: Matthias Kadenbach	8 years ago
Daniel Roethlisberger	0b858431a2	Add warning if version string is bogus	8 years ago
Daniel Roethlisberger	0506024587	Update copyright notices to 2016	8 years ago
Daniel Roethlisberger	43b697d875	Initialize proxy before daemonizing ... Issue: #104	8 years ago
Daniel Roethlisberger	95d4a9bc35	Explicitly initialize OpenSSL with SSL proxy specs ... Make sure we always initialize OpenSSL explicitly, even if there are no certificates or keys loaded or generated. Previously, OpenSSL would only have been initialized if the configuration actually uses certificates or keys, which is not always the case, e.g. with -t pointing to an empty directory. Issue: #92 Reported by: xelalexv	9 years ago
Daniel Roethlisberger	77109df8d2	Improve docs on autogenerated 1024 bit RSA leaf key ... Issue: #83	9 years ago
Daniel Roethlisberger	80b727054b	Refactor proxyspec printing into proxyspec_str()	9 years ago
Daniel Roethlisberger	ce002378b8	Use more intuitive letters for new format specs ... %D for Destination host, %p for the (more interesting) destination port, %S for Source host, %q for the (less interesting) source port.	9 years ago
Daniel Roethlisberger	e17108f9b7	Merge branch 'master' of https://github.com/AdamJacobMuller/sslsplit into issue/74	9 years ago
Daniel Roethlisberger	914360eb5e	Separate host and port into separate strings ... Store host and port in separate strings internally and get rid of the [host]:port representation where separate host and port would be cleaner. This includes the following user-visible changes: - Generated filenames that contain host and port, such as by -S and -F %d and %s, now use a host,port format instead of [host]:port. - Connect log now uses separate fields for host and port. Issue: #69 #74 Reported by: Adam Jacob Muller	9 years ago
Daniel Roethlisberger	91da4674e5	Update copyright, license and tagline ... - Update copyright to 2015 - Remove the non-standard "unmodified" from the 2-clause BSD license - Remove scalable from the tagline to avoid misinterpretations	9 years ago
Adam Jacob Muller	9267cf9bb4	add support for: ... %f - dest address %h - dest port %t - source address %v - source port format specifiers to pathspec	10 years ago
Daniel Roethlisberger	f16783cee2	Move cert writer to logger thread using privsep ... Make -w and -W work in conjunction with dropping privileges and chrooting by moving the cert writer code to a separate logger thread and using the privsep framework to open the files if they do not exist already. Issue: #70	10 years ago
Daniel Roethlisberger	6ec6c56ded	Refactored -w/-W and improved docs	10 years ago
PsychoMario	3aff928daf	moved key output to main.c, caught some bugs	10 years ago
PsychoMario	b34336ab4b	moved to develop branch	10 years ago
PsychoMario	4f310a877a	implemented -W to write original certs	10 years ago
PsychoMario	13dce0aa35	moved write to pxy_srccert_create, -X to -w, opts_free use	10 years ago
PsychoMario	73042d4daa	fix mutual exclusivity, sprintf->asprintf	10 years ago
PsychoMario	61d5186864	added exclusivity with -K, man page and -h	10 years ago
PsychoMario	cbb2a179f9	naive implementation with -X, no help, validation, logging	10 years ago
Daniel Roethlisberger	39e9c898e5	Move default cipher suite spec to defaults.h	10 years ago
Daniel Roethlisberger	b8213e756d	Merge branch 'feature/privsep' into develop ... Conflicts: NEWS.md main.c sslsplit.1	10 years ago
Daniel Roethlisberger	5ac565f5df	Note that -j impacts -S and -F	10 years ago
Daniel Roethlisberger	ab466aafb7	Allow -u root with pf proxyspecs on OS X	10 years ago
Daniel Roethlisberger	f076336e0b	Don't allow -u on Mac OS X with pf proxyspecs ... Apple checks EUID==0 on ioctl(/dev/pf), whereas OpenBSD and FreeBSD only check permissions on open(/dev/pf). This means that on OS X, it is not possible to open /dev/pf, drop privileges, and send an ioctl to the file descriptor opened earlier with EUID==0. It also means Apple broke the Unix way of dealing with device nodes - why are there file permissions on /dev/pf when they later enforce EUID==0 on use, thereby breaking basic Unix mechanisms? Work around this by disallowing -u with pf proxyspecs and by not automatically dropping to nobody on Mac OS X. Issue: #65 Reported by: Vladimir Marteev	10 years ago
Daniel Roethlisberger	e69b13f2eb	SIGUSR1 re-opens -l/-L log files; add defaults.h ... Issue: #52	10 years ago
Daniel Roethlisberger	16a1beb655	Fix version output on local procinfo availability	10 years ago
Daniel Roethlisberger	c01ace1261	Introduce privilege separation architecture ... Fork into a monitor parent process and an actual proxy child process, communicating over AF_UNIX sockets. Certain privileged operations are performed through the privileged parent process, like opening log files or listener sockets, while all other operations happen in the child process, which can now drop its privileges without side-effects for log file opening and other privileged operations. This is also a preparation for -l/-L logfile reopening through SIGUSR1. This means that -S and -F are no longer relative to chroot() if used with -j. This is a deliberate POLA violation.	10 years ago
Daniel Roethlisberger	a027f87c1c	Check if -u and -m user and group exist immediately	10 years ago
Daniel Roethlisberger	2d97659a6b	Check if args to -j and -S are directories	10 years ago
Daniel Roethlisberger	86397dac89	Break at 80 cols	10 years ago
Daniel Roethlisberger	5fd1d7de9c	Rename flags for clarity	10 years ago