11 Commits (c8e9f231bdeb045422d0c2cc05b5ea07b37dab5d)

Author	SHA1	Message	Date
Daniel Roethlisberger	c8e9f231bd	Fix loading of certificate chains with OpenSSL 1.0.2 ... SSLsplit was directly accessing `extra_certs` within `SSL_CTX` to get to the extra certificates chain. When building on OpenSSL 1.0.2 or newer, use the new API instead of directly accessing `extra_certs`. Issue: #79	9 years ago
Daniel Roethlisberger	61cd0fb541	SSLsplit 0.4.10 release	10 years ago
Daniel Roethlisberger	008821cfca	Update NEWS.md	10 years ago
Daniel Roethlisberger	f076336e0b	Don't allow -u on Mac OS X with pf proxyspecs ... Apple checks EUID==0 on ioctl(/dev/pf), whereas OpenBSD and FreeBSD only check permissions on open(/dev/pf). This means that on OS X, it is not possible to open /dev/pf, drop privileges, and send an ioctl to the file descriptor opened earlier with EUID==0. It also means Apple broke the Unix way of dealing with device nodes - why are there file permissions on /dev/pf when they later enforce EUID==0 on use, thereby breaking basic Unix mechanisms? Work around this by disallowing -u with pf proxyspecs and by not automatically dropping to nobody on Mac OS X. Issue: #65 Reported by: Vladimir Marteev	10 years ago
Daniel Roethlisberger	125163a003	Add local process lookup on FreeBSD using sysctl() API	10 years ago
Daniel Roethlisberger	c35e40a597	Update NEWS.md for OpenSSL 0.9.8y bug workaround	10 years ago
Daniel Roethlisberger	6cc01ec32b	Update NEWS.md for -i	10 years ago
Daniel Roethlisberger	f656bcabb7	Update NEWS.md	10 years ago
Daniel Roethlisberger	c8ba26f60d	Update documentation after merging #56	10 years ago
Daniel Roethlisberger	6b0e47dc89	Allow more control over used SSL/TLS versions ... Add -r to force a specific SSL/TLS protocol version. Add -R to disable one or several SSL/TLS protocol versions. Replace WANT_SSLV2_CLIENT and WANT_SSLV2_SERVER to WITH_SSLV2. Issue: #30 Reported by: @Apollo2342	10 years ago
Daniel Roethlisberger	67ed768fec	Migrate documentation to markdown ... Issue: #33	10 years ago