sslsplit
sslsplit copied to clipboard
droe
Transparent SSL/TLS interception
Python 2.7 reaches EOL at the end of this year, so update the Python scripts in the "extra" directory to be compatible with Python 3.
Hi, will it be possible to force sslsplit to ask for client certificates? The upstream dispatch with "-a" and "-b" works fine but i have an IOT device that refuses...
``` logpkt.c: In function 'logpkt_pcap_build': logpkt.c:351:3: warning: converting a packed 'ip4_hdr_t' {aka 'struct '} pointer (alignment 1) to a 'uint16_t' {aka 'short unsigned int'} pointer (alignment 2) may result in...
When connection-related errors happen, they should be logged to the content and/or connect logs in some meaningful way. For `-S` possibly into a separate file with similar filename, for `-L`...
Hello. I’m not sure if this is more documentation/setup related rather than code/functional and the correct place to ask but I won’t be the only one facing this. Recently after...
Dependencies: - #40 Refactoring the proxy core for extensible protocol parsing - #210 Actively manage number of open file descriptors - #215 PCAP logging Tasks: - [ ] Implement minimal...
To support STARTTLS for various protocols, WebSockets, HTTP/2 etc, the proxy core will need to be refactored to more cleanly allow for other protocols than HTTP/1. Separate pxyconn into the...
With WebSockets and HTTP/2 there will be more persistent connections. Therefore actively managing the number of open file descriptors is critical. So far we relied on appropriate rlimits set by...
Preflight checklist: - [ ] Read up on changes in OpenSSL 1.1.1 and TLS 1.3 - [ ] Specifically investigate how encrypted SNI is handled by the OpenSSL 1.1.1 API....
Add an initial version of an end-to-end test framework: A set of python scripts that start sslsplit in various configurations, send requests through it, checking all of client-side, server-side and...