diff --git a/doc/html/plugins/SSLPlugin.html b/doc/html/plugins/SSLPlugin.html index 008baa7..8ced4b4 100644 --- a/doc/html/plugins/SSLPlugin.html +++ b/doc/html/plugins/SSLPlugin.html @@ -1,18 +1,27 @@

3proxy SSL/TLS plugin

-Plugin can be used to transparently decypher SSL/TLS data. Plugin should never be used in production environment due to +Plugin can be used to transparently decypher SSL/TLS data and TLS encryption to proxy. potential securiy reasons. + +
 ssl_certcache PATH_TO_CACHE
 ssl_mitm
 ssl_nomitm
+ssl_srvcert
+ssl_srvkey 
+ssl_serv
+ssl_noserv
 
+ +

For transparent certificate spoofing:

+ ssl_certcache - path to certificates cache. For transparent spoofing cache must contain 3 files: 3proxy.pem - public self-signed certificates, 3proxy.key - key for public certificates, server.key - this key will be used to generates spoofed certificates. Generated certificates will be placed to the same path. -
ssl_mitm - spoof certificates for services started below +
ssl_mitm - spoof certificates for services started below. Using ssl_mitm is insecure, because proxy does not check certificates.
ssl_nomitm - do not spoof certificates for services started below @@ -25,6 +34,25 @@ proxy -p3128 ssl_nomitm proxy -p3129 +

To protect traffic to server (https:// proxy) - since 0.9.5 version

+ssl_srvcert - Server certificate (should not be selfsigned and must contain Alternative name) +ssl_srvkey - Server ceritifacte key +ssl_serv - require TLS connection for services below +ssl_noserv - do not require TLS connection for services below + +Example: +
+plugin /path/to/SSLPlugin.so ssl_plugin
+ssl_srvcert path_to_cert
+ssl_srvkey path_to_key
+ssl_serv
+proxy -p33128
+ssl_noserv
+proxy -p3128
+
+creates https:// proxy on 33128 and http:// proxy on 3128 + +

Download: