Vladimir Dubrovin
fdeee233de
ssl_client_mode added, code cleanup
...
C/C++ CI / ${{ matrix.target }} (macos-15) (push) Has been cancelled
C/C++ CI / ${{ matrix.target }} (ubuntu-24.04-arm) (push) Has been cancelled
C/C++ CI / ${{ matrix.target }} (ubuntu-latest) (push) Has been cancelled
C/C++ CI / ${{ matrix.target }} (windows-2022) (push) Has been cancelled
ssl_client_mode
0 (default) - handshake immediately after connect() (with first parent or with destination if there is no parent)
1 - handshake with destination server (handshake after connection via parents is established)
2 - handshake after data channel is established (e.g. after CONNECT)
2025-12-31 19:56:52 +03:00
Vladimir Dubrovin
aab8531072
ssl_client_alpn added
2025-12-31 13:47:31 +03:00
Vladimir Dubrovin
d014bb1149
Use SSL_connect / SSL_accept in non-blocking mode
C/C++ CI / ${{ matrix.target }} (macos-15) (push) Waiting to run
C/C++ CI / ${{ matrix.target }} (ubuntu-24.04-arm) (push) Waiting to run
C/C++ CI / ${{ matrix.target }} (ubuntu-latest) (push) Waiting to run
C/C++ CI / ${{ matrix.target }} (windows-2022) (push) Waiting to run
2025-12-30 17:57:23 +03:00
Vladimir Dubrovin
730fd96fb0
Fixed: allow ssl server and client on the same service
2025-12-30 15:40:03 +03:00
Vladimir Dubrovin
b5ab5b8906
client_sni command added; do not send hostname from request as SNI in SSL client configuration
C/C++ CI / ${{ matrix.target }} (macos-15) (push) Has been cancelled
C/C++ CI / ${{ matrix.target }} (ubuntu-24.04-arm) (push) Has been cancelled
C/C++ CI / ${{ matrix.target }} (ubuntu-latest) (push) Has been cancelled
C/C++ CI / ${{ matrix.target }} (windows-2022) (push) Has been cancelled
2025-12-12 19:08:26 +03:00
Vladimir Dubrovin
ec7004cd6f
Close SSL on shutdown
2025-12-12 18:25:40 +03:00
Alexey Suslov
7a1ca8d341
Fix HTTPS proxy for HTTPS addresses ( #1175 )
2025-11-17 15:31:54 +03:00
Vladimir Dubrovin
724946a834
Fixed: ssl_server_cert doesn't read full certificate chain
2025-08-10 14:36:00 +03:00
Vladimir Dubrovin
a3e13d8211
Convert PAMAUTH.TXT to UTF-8
2025-06-23 19:24:27 +03:00
Vladimir Dubrovin
43d48adeb9
ssl_server_verify, ssl_server_ca_dir, ssl_server_ca_store added, ssl_server / ssl_client aliases added to ssl_serv / ssl_cli
2025-04-15 19:18:14 +03:00
Vladimir Dubrovin
6355f9659b
ssl_noserv fixed, ssl_cli/ssl_nocli/ssl_client_cert/ssl_client_key added
C/C++ CI / ${{ matrix.target }} (macos-15) (push) Waiting to run
C/C++ CI / ${{ matrix.target }} (ubuntu-24.04-arm) (push) Waiting to run
C/C++ CI / ${{ matrix.target }} (ubuntu-latest) (push) Waiting to run
C/C++ CI / ${{ matrix.target }} (windows-2022) (push) Waiting to run
2025-04-14 21:40:59 +03:00
Vladimir Dubrovin
e6f5f7b5e0
make compatible with openssl 1.x
2025-03-14 20:14:57 +03:00
Vladimir Dubrovin
d48f24ac84
rsa.h not required
2025-03-14 19:56:58 +03:00
Vladimir Dubrovin
4de45ff3a8
Use PCRE_STATIC pcre_plugin.c
2025-03-14 18:03:26 +03:00
Vladimir Dubrovin
74081c8146
use PCRE_STATIC
2025-03-14 17:55:09 +03:00
z3apa3a
74134db09e
Fix ssl_plugin for Windows
2025-03-09 17:22:18 +03:00
Vladimir Dubrovin
ab8db00b1f
Fix type for ssl_poll
2024-06-04 19:26:34 +03:00
Vladimir Dubrovin
d347f0a058
More TLS commands added, ssl_srvkey / ssl_srvfile renamed
...
ssl_server_cert - certificate for SSL server (rename from ssl_srvkey)
ssl_server_key - key for ssl_server_cert of generated mirm certificate (renamed from ssl_srvkey)
ssl_server_ca_file - CA file for mitm
ssl_server_ca_key - key for mitm CA
ssl_client_ca_file, ssl_client_ca_dir, ssl_client_ca_store - locations for root CAs used with ssl_client_verify for TLS client
ssl_certcache is not optional, if ssl_server_ca_file / ssl_server_ca_key are configured
2024-03-10 16:20:42 +03:00
Vladimir Dubrovin
a316622a85
Added multiple TLS configuration parameters for SSLPlugin
...
ssl_client_ciphersuites - TLS client ciphers for TLS 1.3, e.g. ssl_client_ciphersuites TLS_AES_128_GCM_SHA256
ssl_server_ciphersuites - TLS server ciphers for TLS 1.3
ssl_client_cipher_list - TLS client ciphers for TLS 1.2 and below , e.g. ssl_client_cipher_list ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305
ssl_server_cipher_list - TLS server ciphers for TLS 1.2 and below
ssl_client_min_proto_version - TLS client min TLS version (e.g. TLSv1.2)
ssl_server_min_proto_version - TLS server min TLS version (e.g. TLSv1.2)
ssl_client_max_proto_version - TLS client max TLS version (e.g. TLSv1.2)
ssl_server_max_proto_version - TLS server max TLS version (e.g. TLSv1.2)
ssl_client_verify - verify certificate for upstream server in TLS client functionality
ssl_client_no_verify - do not verify certificate for upstream server in TLS client functionality (default)
2024-03-10 13:36:40 +03:00
Vladimir Dubrovin
d87241c487
Keep TLS server context
2024-03-09 18:37:44 +03:00
Vladimir Dubrovin
144af547fb
Keep TLS client context between requests
2024-03-09 16:23:03 +03:00
Vladimir Dubrovin
067fdd7f95
support ssl_serv / ssl_noserv commands
...
example:
plugin /path/to/SSLPlugin.so ssl_plugin
ssl_srvcert path_to_cert
ssl_srvkey path_to_key
ssl_serv
proxy -p33128
ssl_noserv
proxy -p3128
2024-02-18 23:42:09 +03:00
Vladimir Dubrovin
d77e528847
minor fixes
2024-02-18 20:18:31 +03:00
Vladimir Dubrovin
2b4d8e67e4
Do not store CA cert subject
2024-02-18 19:53:35 +03:00
Vladimir Dubrovin
6dc145b16b
initial commit to TLS refactoring
2024-02-18 19:07:09 +03:00
Vladimir Dubrovin
d162ad5c38
Fix windows issues
2024-02-17 18:53:58 +03:00
Vladimir Dubrovin
8198db8617
adding state to socket functions
2024-02-17 17:31:25 +03:00
Vladimir Dubrovin
5e2b2a399e
clean up warnings
2023-07-13 15:29:26 +03:00
Vladimir Dubrovin
1cf169b7ae
FIX: SSLPlugin with SOCKS
2022-05-19 13:26:52 +03:00
Vladimir Dubrovin
d20e76bbc9
FIX: SSLPlugin with http proxy
2022-05-19 11:49:19 +03:00
Vladimir Dubrovin
468124f55c
Fix SSLPlugin with HTTP proxy
2022-05-18 18:14:24 +03:00
Vladimir Dubrovin
6c1b711fc9
do not ignore Makefile from plugins
2021-10-29 19:26:20 +03:00
z3apa3a
e1b4e50242
Copyright update
2021-07-02 11:50:33 +03:00
z3apa3a
1fca6ada82
Use self-built openssl for Windows
2021-07-01 19:55:20 +03:00
z3apa3a
e642100271
Merge branch 'master' of https://github.com/3proxy/3proxy
2021-05-15 18:42:30 +03:00
Vladimir Dubrovin
e235ada0de
Make SSLPlugin to compile under *nix
2021-05-11 13:53:41 +03:00
z3apa3a
3f4c267a25
Use logic operation instead of binary where appropriate
2021-04-22 17:59:10 +03:00
z3APA3A
05bc297ea7
Fixed SSLPlugin handling
2020-11-19 23:22:15 +03:00
z3APA3A
f23b6b0d96
export pcre_options
2020-11-19 02:52:47 +03:00
z3APA3A
99a744abda
Few bugfixes
2020-11-18 16:10:07 +03:00
z3APA3A
22cf9254c5
rename memory functions in pluginlink
2019-09-03 20:46:47 +03:00
z3APA3A
336b411ea2
do not use "my" prefix for memory functions in pluginlink
2019-08-19 12:35:36 +03:00
z3APA3A
cb217d79c1
Fix: IPv6 support in TransparentPlugin
2019-08-13 12:38:03 +03:00
z3APA3A
70ed1233fb
Remove outdated LastFRipper plugin
2019-08-13 12:35:47 +03:00
z3APA3A
5471e0faf4
attempt to support IPv6 in netfilter transparent redirection
2019-08-12 14:11:08 +03:00
z3APA3A
38a1ab80bc
minor changes
2019-06-20 11:19:58 +03:00
z3APA3A
9bd81a18b9
Use native OpenSSL 1.0 static build for Windows
2018-04-27 01:54:28 +03:00
z3APA3A
836fffddbe
Include openssl/applink.c in windows plugin DLL
2018-04-25 14:38:32 +03:00
z3APA3A
e2906f1219
pass version thorugh building environment
2018-04-21 03:26:49 +03:00
z3APA3A
7423cd0112
Clearing LdapPlugin compilation issues
2018-04-06 17:45:18 +03:00
