Daniel Roethlisberger
Daniel Roethlisberger
The MAIN and FILE headers sometimes contain additional data in the `reserved1` and `reserved2` fields. The information therein should be parsed and added to the API.
NTFS streams seem to be handled by archiving them using a special filename. This needs to be investigated (need sample files!) and implemented as appropriate.
With the public release of macOS 10.14.5, Apple requires that all new and updated kernel extensions be notarized.
This implements `-i` on Linux, as per long-standing open issue #61. Commit represents sslsplit-0.5.3-linux-pid-privsep.patch submitted by e-mail message . The patch author did not verify thread-safety of privsep_client* functions, need...
When connection-related errors happen, they should be logged to the content and/or connect logs in some meaningful way. For `-S` possibly into a separate file with similar filename, for `-L`...
Dependencies: - #40 Refactoring the proxy core for extensible protocol parsing - #210 Actively manage number of open file descriptors - #215 PCAP logging Tasks: - [ ] Implement minimal...
To support STARTTLS for various protocols, WebSockets, HTTP/2 etc, the proxy core will need to be refactored to more cleanly allow for other protocols than HTTP/1. Separate pxyconn into the...
With WebSockets and HTTP/2 there will be more persistent connections. Therefore actively managing the number of open file descriptors is critical. So far we relied on appropriate rlimits set by...
Preflight checklist: - [ ] Read up on changes in OpenSSL 1.1.1 and TLS 1.3 - [ ] Specifically investigate how encrypted SNI is handled by the OpenSSL 1.1.1 API....
Add an initial version of an end-to-end test framework: A set of python scripts that start sslsplit in various configurations, send requests through it, checking all of client-side, server-side and...