ssl-proxy

ssl-proxy copied to clipboard

Reasonably secure TLS defaults

4

In it's present state ssl-proxy is by default vulnerable to a lot of attacks (as revealed by running e.g. [testssl.sh](https://testssl.sh/) against it). IMHO ssl-proxy should therefore use reasonably secure TLS...

cstsw

Hardening: TLS >= 1.2, limit cipher suites

1

In order to provide a reasonably secure TLS configuration, the following defaults have been set: - Don't use TLS versions below 1.2 as those are vulnerable to attacks such as...

cstsw

Switch golang base image to Debian in order to address libc linking p…

1

…roblem Alpine has subistituted GNU libc with musl in 2014 (see https://www.alpinelinux.org/posts/Alpine-Linux-has-switched-to-musl-libc.html) So if one builds ssl-proxy on Alpine, the linux binary will contain a reference to the musl library....

cstsw

Update to go 1.18 and release for apple M1

1

raymondk

I use ssl-proxy on a robot. Since it doesn't have a real-time clock, it syncs its time over ntp after booting. To avoid letsencrypt rate limiting, ssl-proxy should sanity check...

grischard

When I build the latest master-revision a4f852967d92c09ec4cb638a3f51e3a6b496ec4a via Docker, I get the following error when executing the Linux-Binary: `./ssl-proxy-linux-amd64: No such file or directory` In my use-case I provide a...

cstsw

does it support multiple sites in one ip address ?

2

when I have only one site need to do reverse proxy , ssl-proxy works like a charm ! but I have no idea how to run ssl-proxy for multiple sites...

changchichung

jessepeterson

``` Usage of ./ssl-proxy: -cert string path to a tls certificate file. If not provided, ssl-proxy will generate one for you in ~/.ssl-proxy/ -domain string domain to mint letsencrypt certificates...

andoks

docker image

1

It would be much better to use a docker builder pattern to reduce the size of the image to the minimum. Also would be nice to publish an official image...

tcurdt