Commit Graph

25 Commits (f348c1a372c199b067e604ca34dca92420295c3b)

Author SHA1 Message Date
Daniel Roethlisberger 716139b169 Suppress SPDY/QUIC by removing Alternate-Protocol headers 11 years ago
Daniel Roethlisberger d4d249fb87 Update NEWS 11 years ago
Daniel Roethlisberger a5660fa3c9 Update NEWS 11 years ago
Daniel Roethlisberger 2235e1aad9 Fix memory leak in fake cert generation code
The code in pxy_ossl_servername_cb() which generated the forged
certificates did not call SSL_CTX_free() on the newly allocated SSL_CTX
struct after associating it with the SSL struct, which increments the
reference count internally.  Also add some comments explaining OpenSSL
reference counting behaviour to be more explicit on what happens to the
instances that OpenSSL keeps track of.
11 years ago
Daniel Roethlisberger 202b1270e3 Create session.pem without Internet connectivity
Use openssl s_server in order to create a temporary SSL server for
creating an SSL session dump for the unit tests to work with.  This
removes the requirement of having Internet connectivity for running the
test suite, which prevented package builds from running the unit tests.
11 years ago
Daniel Roethlisberger 54685bab6d Update NEWS 11 years ago
Daniel Roethlisberger c8723506e7 Update NEWS 11 years ago
Daniel Roethlisberger 6643d832d9 Add experimental support for pf on Mac OS X
Support pf rdr on Mac OS X 10.7, 10.8 and 10.9 by including the missing
Apple headers in the source tree and enable private Apple code.  Since
we are using an interface marked private by Apple, this code is very
experimental.

Issue:		#15
Reported by:	Amit Chowdhary
11 years ago
Daniel Roethlisberger 90fd8ec28e Update NEWS 11 years ago
Daniel Roethlisberger 7839de3b0d Update NEWS 11 years ago
Daniel Roethlisberger 33692df51a SSLsplit 0.4.7 release 11 years ago
Daniel Roethlisberger a0fd9c1050 Start thrmgr threads after forking 11 years ago
Daniel Roethlisberger 1e67db0b66 Update NEWS after merge of feature/resphdrfilter 11 years ago
Daniel Roethlisberger 38280818f8 Add HTTP content-length to connect log 11 years ago
Daniel Roethlisberger b746a6f6bb Add HTTP response header filtering
Filter response headers in order to remove HPKP headers.  As an added
benefit, parse the HTTP status code and add it to the connection log.
11 years ago
Daniel Roethlisberger b662906f9b SSLsplit 0.4.6 release 11 years ago
Daniel Roethlisberger 8fceac4201 Update NEWS for issue #9 11 years ago
Daniel Roethlisberger 711448759c Bind to ports before dropping privileges
This fixes a regression which caused bind() to ports < 1024 to fail with
the default settings of dropping privileges to nobody.

Issue:          #8
Reported by:    Ian Grispan
12 years ago
Daniel Roethlisberger 20b3f66120 Work around segfault with OpenSSL 1.0.0k/1.0.1e
A bug in OpenSSL 1.0.0k and 1.0.1e caused sslsplit to crash when loading
certificates using SSL_get_certificate().  Work around the bug by
directly accessing the respective members of SSL* when using any of the
broken versions of OpenSSL.
12 years ago
Daniel Roethlisberger 37758dda59 SSLsplit 0.4.5 release 12 years ago
Daniel Roethlisberger 6e6868c051 Update NEWS 12 years ago
Daniel Roethlisberger 71f06e501c Update NEWS 12 years ago
Daniel Roethlisberger eb6162389f Remove commit ids from NEWS file 12 years ago
Daniel Roethlisberger e19a97b21f Update NEWS and TODO 12 years ago
Daniel Roethlisberger 11fdf52553 Add NEWS file, documenting release history 13 years ago