mirror of https://github.com/sonertari/SSLproxy
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
294 lines
8.3 KiB
JSON
294 lines
8.3 KiB
JSON
{
|
|
"comment": "Tests for HTTP request headers: SSLproxy, Connection, Upgrade, Keep-Alive, Accept-Encoding, Via, X-Forwarded-For, and Referer",
|
|
"configs": {
|
|
"1": {
|
|
"proto": {
|
|
"proto": "tcp"
|
|
},
|
|
"client": {
|
|
"ip": "127.0.0.1",
|
|
"port": "8180"
|
|
},
|
|
"server": {
|
|
"ip": "127.0.0.1",
|
|
"port": "9180"
|
|
}
|
|
},
|
|
"2": {
|
|
"proto": {
|
|
"proto": "ssl",
|
|
"tcp_nodelay": "yes",
|
|
"ip_ttl": "15",
|
|
"connect_timeout": "1000",
|
|
"read_timeout": "50",
|
|
"write_timeout": "50",
|
|
"verify_peer": "no",
|
|
"ciphers": "MEDIUM:HIGH",
|
|
"no_ssl2": "yes",
|
|
"no_ssl3": "yes",
|
|
"no_tls10": "yes",
|
|
"no_tls11": "yes",
|
|
"no_tls12": "yes",
|
|
"no_tls13": "yes",
|
|
"min_proto_version": "ssl3",
|
|
"max_proto_version": "tls13",
|
|
"ecdhcurve": "prime256v1",
|
|
"use_sni": "no",
|
|
"verify_hostname": "no",
|
|
"compression": "no"
|
|
},
|
|
"client": {
|
|
"ip": "127.0.0.1",
|
|
"port": "8446",
|
|
"ciphers": "MEDIUM",
|
|
"use_sni": "yes",
|
|
"verify_hostname": "yes",
|
|
"no_tls10": "no",
|
|
"max_proto_version": "tls11"
|
|
},
|
|
"server": {
|
|
"ip": "127.0.0.1",
|
|
"port": "9446",
|
|
"crt": "server.crt",
|
|
"key": "server.key",
|
|
"ciphers": "HIGH",
|
|
"no_tls12": "no",
|
|
"min_proto_version": "tls12",
|
|
"compression": "yes"
|
|
}
|
|
}
|
|
},
|
|
"tests": {
|
|
"1": {
|
|
"comment": "Removes any extra SSLproxy line",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nSSLproxy: sslproxy\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"5": {
|
|
"testend": "server",
|
|
"cmd": "timeout",
|
|
"payload": "",
|
|
"comment": "Just a sample timeout command"
|
|
}
|
|
}
|
|
},
|
|
"2": {
|
|
"comment": "Removes all extra SSLproxy lines",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nSSLproxy: sslproxy\r\nSSLproxy: sslproxy\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"3": {
|
|
"comment": "Changes Connection header to close",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: Keep-Alive\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"4": {
|
|
"comment": "Suppresses upgrading to SSL/TLS, WebSockets or HTTP/2",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nUpgrade: websocket\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"5": {
|
|
"comment": "Removes Keep-Alive",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nKeep-Alive: keep-alive\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"6": {
|
|
"comment": "Does not remove Accept-Encoding by default (it's a config option)",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nAccept-Encoding: encoding\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nAccept-Encoding: encoding\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"7": {
|
|
"comment": "Removes Via",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nVia: via\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"8": {
|
|
"comment": "Removes X-Forwarded-For",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nX-Forwarded-For: x-forwarded-for\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
},
|
|
"9": {
|
|
"comment": "Removes Referer",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nReferer: referer\r\n\r\n"
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n"
|
|
},
|
|
"3": {
|
|
"testend": "server",
|
|
"cmd": "send",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
},
|
|
"4": {
|
|
"testend": "client",
|
|
"cmd": "recv",
|
|
"payload": "HTTP/1.1 302 Found\r\nLocation: sslproxy\r\n\r\n"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |