mirror of
https://github.com/sonertari/SSLproxy
synced 2024-10-31 21:20:21 +00:00
8f63ec7f82
The ReconnectSSL option allows rule developers to write struct filtering rules using SNI and CN SSL specifications to override the SSL configuration of a connection. Otherwise, without this new option, filtering rules cannot change SSL options using SSL filtering fields to match connections (the SSL config in the rule would not have any effect on the server side of the matching connection). Without ReconnectSSL, only DstIP and DstPort fields can be used to override the SSL config of a connection. If the ReconnectSSL option in a struct filtering rule is set, we disconnect and free the server side of the matching SSL connection, and reconnect it with the SSL options in the matching struct filtering rule. This enforces the SSL config in the rule. Do not use the ReconnectSSL option if server disconnect is not desirable or acceptable in your case. |
||
---|---|---|
.. | ||
check | ||
testproxy |