Soner Tari
a56929922d
Fix link
2018-01-17 03:59:39 +03:00
Soner Tari
a2b14097dd
Verify upstream certificates, see https://insights.sei.cmu.edu/cert/2015/03/the-risks-of-ssl-inspection.html
2018-01-17 03:54:16 +03:00
Soner Tari
3ae89131dc
Use different syslog facilities for error, conn, and stats logs, so they can be filtered into separate log files in syslog.conf
2017-10-30 01:22:34 +03:00
Soner Tari
392c6be48c
Add SSLproxy copyright to -v output
2017-10-26 21:41:30 +03:00
Soner Tari
b064ffa668
Use llu int as unique conn id, much simpler than uuid
2017-10-26 20:10:36 +03:00
Soner Tari
137f017cb5
Fix EXPIRED message bug, other fixes and improvements
2017-10-26 18:57:46 +03:00
Soner Tari
a1c5d05143
Add support for log priority to error logs, so syslogd prints the correct prio for error logs now
2017-10-15 01:39:30 +03:00
Soner Tari
179aa4fc8f
Close the conn if we are out of file descriptors, or libevent will crash us
2017-09-04 13:05:51 +03:00
Soner Tari
4bf27d09e5
Add RemoveHTTPReferer option, Referer causes redirection errors with some sites
2017-09-03 23:11:20 +03:00
Soner Tari
19f5a70920
Update README
2017-09-02 22:45:01 +03:00
Soner Tari
ee707ab6cb
Update man pages
2017-08-24 23:27:50 +03:00
Soner Tari
f7b3930053
Fix divert link
2017-08-24 23:04:46 +03:00
Soner Tari
077e97dbba
Add more CRITICAL error logs
...
Fix some logs
Clean-up
2017-08-24 21:52:56 +03:00
Soner Tari
09c3e864c5
Add sslproxy.conf man page
2017-08-24 17:03:01 +03:00
Soner Tari
a79cf4e0d1
Add sslproxy.conf man page and example sslproxy.conf, and related make changes
2017-08-24 16:16:45 +03:00
Soner Tari
d52ee62079
Add RemoveHTTPAcceptEncoding option
2017-08-24 13:30:23 +03:00
Soner Tari
8bd7827b8e
Improve man page and README
2017-08-23 14:48:39 +03:00
Soner Tari
32a38b7b4d
Update README, fix mistakes
2017-08-23 14:14:21 +03:00
Soner Tari
867ffe28e6
Fix typo
2017-08-23 04:48:37 +03:00
Soner Tari
7e8d94d0a6
Fix typos
2017-08-23 04:09:23 +03:00
Soner Tari
3717bddc36
Update README
2017-08-23 03:27:53 +03:00
Soner Tari
40f1997bfb
Update README
...
Update man page
2017-08-23 02:15:31 +03:00
Soner Tari
28cfac12e9
Update man page for SSLproxy
2017-08-23 00:37:31 +03:00
Soner Tari
4fceaaa0e9
Fix compiler warning
...
Rename the man page for the ports package
2017-08-22 02:02:30 +03:00
Soner Tari
0b5ef8b14d
Mark critical errors as CRITICAL
2017-08-21 17:53:24 +03:00
Soner Tari
9ec58f821b
Changes needed while adding SSL proxy support to WUI
...
Separate mail/mails to pop3/pop3s/smtp/smpts for statistics
Write connect logs to syslog too, for statistics
Fix log lines for statistics, remove fds from err logs
2017-08-20 01:46:57 +03:00
Soner Tari
7748e3ec1b
Add conf file support, with -f command line option, supports a subset of all possible options
2017-08-16 16:01:52 +03:00
Soner Tari
1a6eab50a5
Tidy and clean logs up
...
Add DEBUG_PROXY directive around all log_dbg_level_printf() and related lines
Log stats to syslog, similar to error logs, so that it is simpler to rotate and parse
-O w/o -g is failing bufferevent_socket_connect for parent dst, so either enable -O w/ -g, or disable -O w/o -g (-O2 is failing too)
Refactoring
2017-08-13 04:36:33 +03:00
Soner Tari
36c89a0314
Fix crash if no logging enabled
...
Disable debug, the default now
2017-08-11 16:53:46 +03:00
Soner Tari
ea6dc07248
Rename to sslproxy
...
Reduce http headers to just one SSLproxy line
2017-08-11 15:01:51 +03:00
Soner Tari
4bfc85868b
Add support for pop3 (p3scan pop3 proxy)
...
Send sslproxy info only once, in the first packet only
Clean-up
2017-08-03 14:55:57 +03:00
Soner Tari
9e637dd2cc
Clean-up
2017-08-01 16:05:25 +03:00
Soner Tari
1ae732f533
There are 3 dst bevs, writecbs of all of them may fire before connected event, so call eventcb first when that happens for each dst bevs.
...
Check if srv_dst bev is NULL or not: Since both eventcb and writecb for srv_dst are enabled, either eventcb or writecb may get a NULL srv_dst bev, causing a crash with signal 10.
Remove unnecessary evutil_closesocket() calls, they could close the fds twice, causing conn stalls
2017-08-01 14:57:49 +03:00
Soner Tari
5a136b7ce7
Add extra stats
...
Rearrange, clean-up
2017-07-30 00:34:46 +03:00
Soner Tari
cea873e6f2
Set the OPENBSD directive at compile time
2017-07-29 01:15:39 +03:00
Soner Tari
b6d1d92990
Fix use after free, other.bev may be NULL
2017-07-28 21:15:22 +03:00
Soner Tari
d35e9af521
Fix use after free, other.bev may be NULL
2017-07-28 16:43:26 +03:00
Soner Tari
dd7bf7b277
Fix srv_dst EOF on outbound connection before connection establishment, free conn, also move i/o debug lines to prevent segfault due to already freed srv_dst
...
Remove squid header lines only in children
2017-07-28 12:52:53 +03:00
Soner Tari
2411f79582
Add plain or ssl info to SSLproxy specific header line
...
Fix child eof bug
Flickr keeps redirecting to https with 301 unless we remove the Via line of squid, so apparently flickr assumes the existence of Via header field or squid keyword a sign of plain http, even if we are using https
Also do not send the loopback address to the Internet
Other fixes
2017-07-27 17:50:45 +03:00
Soner Tari
67ddee1585
Import sslsplit-devel changes
...
Add stats logs, initial
Add SSLproxy_SrcAddr header field
Clean-up
2017-07-25 16:07:39 +03:00
Soner Tari
3958adce9e
Replace string manipulation functions with memory functions, simplify, clean-up
2017-07-23 16:44:32 +03:00
Soner Tari
378c8c03ef
Fix/improve logging, clean-up
2017-07-23 01:15:59 +03:00
Soner Tari
5a496d04e0
Make utm service port spec a command line option
...
Check NULL retvals, clean-up
2017-07-22 16:30:40 +03:00
Soner Tari
26cbefa3a4
Use inet_ntop() instead of inet_ntoa()
...
Fix compiler warnings
2017-07-22 13:52:40 +03:00
Soner Tari
34665cf3c7
Refactor for code reuse, clean-up
...
Fix drive.google issue: Watermark disable mistake
2017-07-22 00:44:12 +03:00
Soner Tari
bc55a5f7bb
Import sslsplit code for errorcb ERROR event, and improvements
2017-07-21 13:46:44 +03:00
Soner Tari
63c51e9edd
Fix packet size
2017-07-21 00:44:21 +03:00
Soner Tari
f38163f7ed
Code reuse, improvements, clean-up
2017-07-20 17:55:00 +03:00
Soner Tari
f38c3b4552
Enable HTTP code, needs extensive refactoring and clean-up
2017-07-18 22:07:29 +03:00
Soner Tari
74c2e18e43
BEV_OPT_DEFER_CALLBACKS seems responsible for the issue with srv_dst, libevent acts as if we call event connect() ourselves. See: Launching connections on socket-based bufferevents at http://www.wangafu.net/~nickm/libevent-book/Ref6_bufferevent.html . So enable writecb and assume write event as CONNECTED too.
2017-07-17 12:47:42 +03:00
