Soner Tari comments

Results 220 comments of


                                            Soner Tari

Cannot intercept protocol in which SSL connection is initiated by the server

I still think that the issue may be the client not liking the CA cert you pass to sslproxy (isn't it self-signed?). Can you add the CA cert to the...

Cannot intercept protocol in which SSL connection is initiated by the server

No, I think you're right. I've been trying to rule out all usual suspects, and I had assumed you were confused about the "switched" roles of client and server. But...

Cannot intercept protocol in which SSL connection is initiated by the server

I don't want to discourage you, but I think it wouldn't be easy to reverse the roles of client and server. (For example, sslsplit/sslproxy expects SNI from client before connecting...

Cannot intercept protocol in which SSL connection is initiated by the server

It's more complicated than that.

PPPOE server Feature

I don't have a PPPoE setup to develop such a feature, and it doesn't seem likely I will have in the near future. Also, to compete with such alternatives as...

can't modify dns

Have you restarted the system after this change? (You could perhaps restart the network and dnsmasq too, but restarting the system may be better.)

how to set ipv4, when enable ipv6

The UI does not support IPv6. In fact, I cannot confirm if the underlying UTM services support IPv6 either. Sorry.

Is that possible to import the all packet data to request header like getting source/destination ip/port via req.Header.Get("SslProxy") ?

Listening program should parse the SSLproxy line in the first packet of a connection to get the source and destination addresses, as explained in README, if I understand your question...

Is that possible to import the all packet data to request header like getting source/destination ip/port via req.Header.Get("SslProxy") ?

Yes, that's the purpose of SSLproxy with a listening program. See [the sample lp program](https://github.com/sonertari/SSLproxy/tree/master/tests/testproxy/lp), which is used with e2e tests too.

Question: Divert socket seems to not be forwarding traffic back to original client

You sound like you know what you're doing, so I assume you already know that SSLproxy is designed to divert the decrypted packets to a listening program, and to expect...