Soner Tari
|
dabc9c7b20
|
Increase the default RSA key size to 2048
|
2019-08-04 11:15:05 +03:00 |
|
Soner Tari
|
0d5af14325
|
Improve exit status handling, merged from sslsplit
|
2019-08-03 15:31:40 +03:00 |
|
Soner Tari
|
58821e99cf
|
Fix cert_new_load() load chain test failure with LibreSSL 2.9.2: LIBRESSL_VERSION_NUMBER >= 0x20902000L supports SSL_CTX_get0_chain_certs()
|
2019-08-02 17:29:31 +03:00 |
|
Soner Tari
|
6072cf7bd5
|
Fix opts test on osx
|
2019-08-02 13:42:09 +03:00 |
|
Soner Tari
|
52802b6291
|
Add new opts tests
|
2019-08-02 13:21:01 +03:00 |
|
Soner Tari
|
fc153338ca
|
Free tmp strs used to clone global opts into proxyspecs asap
Fix English
|
2019-07-31 14:46:04 +03:00 |
|
Soner Tari
|
1a7dc673bf
|
Fix libressl macros: OPENSSL_VERSION_NUMBER on OpenBSD is always 0x20000000L (> 0x10100000L)
|
2019-07-31 01:41:24 +03:00 |
|
Soner Tari
|
6cdec55509
|
Enable Force/Min/MaxSSLProto options with LibreSSL 2.7.2+ (OpenBSD 6.3)
|
2019-07-31 00:25:57 +03:00 |
|
Soner Tari
|
001420a7ab
|
Fix travis and OpenBSD builds
|
2019-07-30 23:08:24 +03:00 |
|
Soner Tari
|
231806ea75
|
Add MinSSLProto/MaxSSLProto options
Fix memout handling
|
2019-07-30 21:46:18 +03:00 |
|
Soner Tari
|
5961913828
|
Fix ocsp uri check
|
2019-07-30 21:00:05 +03:00 |
|
Soner Tari
|
b9b1744568
|
Fix str var free in passsite_str
|
2019-07-25 21:24:30 +03:00 |
|
Soner Tari
|
fdcf138150
|
Put option dbg logs in between DEBUG_OPTS macro
Assume ownership of further code
Clean up
|
2019-07-23 12:55:06 +03:00 |
|
Soner Tari
|
3c124966e4
|
Update documentation
|
2019-07-22 11:24:53 +03:00 |
|
Soner Tari
|
091acf79ab
|
Fix autossl, after changes to reuse parent srvdst as dst
|
2019-07-21 22:01:56 +03:00 |
|
Soner Tari
|
3cbcffcebc
|
Reuse parent srvdst as dst of first child to avoid connecting to server twice, first conn was to get server cert for forging, so we xfer srvdst to first child after parent does not need it anymore
|
2019-07-20 22:29:08 +03:00 |
|
Soner Tari
|
78ba1e075c
|
Debug print SSLproxy line on lp
|
2019-07-18 14:36:47 +03:00 |
|
Soner Tari
|
2cb6dd573e
|
Remove lp binary
|
2019-07-18 12:28:52 +03:00 |
|
Soner Tari
|
e8f9f216a9
|
Add lp listening program and testproxy tests under extra
|
2019-07-18 11:48:15 +03:00 |
|
Soner Tari
|
c54cb627a1
|
Fix passthrough mode engage upon srvdst ssl error
|
2019-07-14 22:07:08 +03:00 |
|
Soner Tari
|
6b8b819daa
|
Add sample struct proxyspec
|
2019-07-13 11:34:23 +03:00 |
|
Soner Tari
|
e1aac3a69d
|
Fix main_check_opts
|
2019-07-13 11:33:26 +03:00 |
|
Soner Tari
|
8484c8b927
|
Fix handling of proxyspec struct closing brace
|
2019-07-12 22:36:52 +03:00 |
|
Soner Tari
|
c9769b0d89
|
Fix global opts lprocinfo
|
2019-07-12 16:03:22 +03:00 |
|
Soner Tari
|
f42e682f59
|
Fix unit tests
|
2019-07-12 15:52:36 +03:00 |
|
Soner Tari
|
58eb907d69
|
Separate global and proxyspec opts
|
2019-07-12 14:40:04 +03:00 |
|
Soner Tari
|
d6f0f4cdc7
|
Create proxyspec options
|
2019-07-08 21:49:06 +03:00 |
|
Soner Tari
|
57ae6f07a5
|
Update OCSP denied comments
|
2019-07-08 21:45:30 +03:00 |
|
Soner Tari
|
70fa08a36a
|
Fix OCSP denied response
|
2019-07-03 02:10:51 +03:00 |
|
Soner Tari
|
3b25ea2e34
|
Fix http method validation: Compare 1 byte longer than method len, so that GET1 is not validated as GET
|
2019-07-02 22:30:40 +03:00 |
|
Soner Tari
|
a7d671169c
|
Fix handling of HTTP Accept-Encoding
|
2019-06-18 10:23:50 +03:00 |
|
Soner Tari
|
d50bb0bfa6
|
Fix proto http child setup
|
2019-06-16 17:58:31 +03:00 |
|
Soner Tari
|
f6a8522d1e
|
Enable -O2 optimization, remove -g
Clean up gitignore
Fix typos
|
2019-05-27 11:12:12 +03:00 |
|
Soner Tari
|
1c8a837df1
|
Fix FreeBSD support: Call available_fds() on FreeBSD too
|
2019-05-08 23:45:10 +03:00 |
|
Soner Tari
|
adee22db09
|
Fix FreeBSD support, pr #13 by @5u623l20
FreeBSD does not have getdtablecount() and needs netinet/in.h
|
2019-05-08 21:47:16 +03:00 |
|
Soner Tari
|
d1a3328c58
|
Differentiate PassSite option from Passthrough option: PassSite does not require Passthrough now
Remove redundant if conditions
|
2019-05-02 19:06:48 +03:00 |
|
Soner Tari
|
c146b8a0ec
|
Make sure sni and ssl_names are not null, fixes signal 11 crash reported by @janusloo
|
2019-05-01 00:35:15 +03:00 |
|
Soner Tari
|
22ad78c8f9
|
Fix passthrough conn logging
|
2019-04-22 23:01:57 +03:00 |
|
Soner Tari
|
26a73d797d
|
Fix passsite struct free
|
2019-04-21 01:46:40 +03:00 |
|
Soner Tari
|
c3abe74776
|
Add client filtering to PassSite option, per site filters can be defined using client IP addresses, users, and description keywords
|
2019-04-21 01:00:46 +03:00 |
|
Soner Tari
|
07a6c32e93
|
Update documentation with PassSite option
|
2019-04-20 01:13:06 +03:00 |
|
Soner Tari
|
7e17bd198e
|
Require ssl_names if passsite is set
|
2019-04-19 23:21:58 +03:00 |
|
Soner Tari
|
119fc8e69e
|
Improve passsite log messages and comments
|
2019-04-19 20:59:28 +03:00 |
|
Soner Tari
|
7e8fcbcafa
|
Move strncpy() call from passsite matching to initial PassSite setup
|
2019-04-19 04:21:41 +03:00 |
|
Soner Tari
|
ddeb9831ed
|
Add PassSite option, if the site matches SNI or common names in the SSL certificate, the connection is passed through the proxy, issue #12
|
2019-04-19 01:17:41 +03:00 |
|
Soner Tari
|
89150fe4d6
|
Enable more ssl info in conn logs, especially common names in crts
|
2019-04-18 16:01:44 +03:00 |
|
Soner Tari
|
24972bda48
|
Rearrange debug log messages
|
2019-04-03 20:23:30 +03:00 |
|
Soner Tari
|
8c2fd3cc31
|
Replace recursion with while loop in child max fd computation and debug logging
|
2019-03-31 18:22:19 +03:00 |
|
Soner Tari
|
3c8d6e7e4e
|
Fix the location of the assertion checking NULL thr conns list, nice catch by this assert() call, that it is misplaced, so add further assertions
|
2019-03-29 15:38:03 +03:00 |
|
Soner Tari
|
0eaf475193
|
Update documentation with the new user info in SSLproxy line
|
2019-03-28 17:06:07 +03:00 |
|