Vladimir Dubrovin
a316622a85
Added multiple TLS configuration parameters for SSLPlugin
...
ssl_client_ciphersuites - TLS client ciphers for TLS 1.3, e.g. ssl_client_ciphersuites TLS_AES_128_GCM_SHA256
ssl_server_ciphersuites - TLS server ciphers for TLS 1.3
ssl_client_cipher_list - TLS client ciphers for TLS 1.2 and below , e.g. ssl_client_cipher_list ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305
ssl_server_cipher_list - TLS server ciphers for TLS 1.2 and below
ssl_client_min_proto_version - TLS client min TLS version (e.g. TLSv1.2)
ssl_server_min_proto_version - TLS server min TLS version (e.g. TLSv1.2)
ssl_client_max_proto_version - TLS client max TLS version (e.g. TLSv1.2)
ssl_server_max_proto_version - TLS server max TLS version (e.g. TLSv1.2)
ssl_client_verify - verify certificate for upstream server in TLS client functionality
ssl_client_no_verify - do not verify certificate for upstream server in TLS client functionality (default)
2024-03-10 13:36:40 +03:00
Vladimir Dubrovin
d87241c487
Keep TLS server context
2024-03-09 18:37:44 +03:00
Vladimir Dubrovin
144af547fb
Keep TLS client context between requests
2024-03-09 16:23:03 +03:00
Vladimir Dubrovin
067fdd7f95
support ssl_serv / ssl_noserv commands
...
example:
plugin /path/to/SSLPlugin.so ssl_plugin
ssl_srvcert path_to_cert
ssl_srvkey path_to_key
ssl_serv
proxy -p33128
ssl_noserv
proxy -p3128
2024-02-18 23:42:09 +03:00
Vladimir Dubrovin
d77e528847
minor fixes
2024-02-18 20:18:31 +03:00
Vladimir Dubrovin
2b4d8e67e4
Do not store CA cert subject
2024-02-18 19:53:35 +03:00
Vladimir Dubrovin
6dc145b16b
initial commit to TLS refactoring
2024-02-18 19:07:09 +03:00
Vladimir Dubrovin
d162ad5c38
Fix windows issues
2024-02-17 18:53:58 +03:00
Vladimir Dubrovin
8198db8617
adding state to socket functions
2024-02-17 17:31:25 +03:00
Vladimir Dubrovin
5e2b2a399e
clean up warnings
2023-07-13 15:29:26 +03:00
Vladimir Dubrovin
1cf169b7ae
FIX: SSLPlugin with SOCKS
2022-05-19 13:26:52 +03:00
Vladimir Dubrovin
d20e76bbc9
FIX: SSLPlugin with http proxy
2022-05-19 11:49:19 +03:00
Vladimir Dubrovin
468124f55c
Fix SSLPlugin with HTTP proxy
2022-05-18 18:14:24 +03:00
Vladimir Dubrovin
6c1b711fc9
do not ignore Makefile from plugins
2021-10-29 19:26:20 +03:00
z3apa3a
e1b4e50242
Copyright update
2021-07-02 11:50:33 +03:00
z3apa3a
1fca6ada82
Use self-built openssl for Windows
2021-07-01 19:55:20 +03:00
z3apa3a
e642100271
Merge branch 'master' of https://github.com/3proxy/3proxy
2021-05-15 18:42:30 +03:00
Vladimir Dubrovin
e235ada0de
Make SSLPlugin to compile under *nix
2021-05-11 13:53:41 +03:00
z3apa3a
3f4c267a25
Use logic operation instead of binary where appropriate
2021-04-22 17:59:10 +03:00
z3APA3A
05bc297ea7
Fixed SSLPlugin handling
2020-11-19 23:22:15 +03:00
z3APA3A
f23b6b0d96
export pcre_options
2020-11-19 02:52:47 +03:00
z3APA3A
99a744abda
Few bugfixes
2020-11-18 16:10:07 +03:00
z3APA3A
22cf9254c5
rename memory functions in pluginlink
2019-09-03 20:46:47 +03:00
z3APA3A
336b411ea2
do not use "my" prefix for memory functions in pluginlink
2019-08-19 12:35:36 +03:00
z3APA3A
cb217d79c1
Fix: IPv6 support in TransparentPlugin
2019-08-13 12:38:03 +03:00
z3APA3A
70ed1233fb
Remove outdated LastFRipper plugin
2019-08-13 12:35:47 +03:00
z3APA3A
5471e0faf4
attempt to support IPv6 in netfilter transparent redirection
2019-08-12 14:11:08 +03:00
z3APA3A
38a1ab80bc
minor changes
2019-06-20 11:19:58 +03:00
z3APA3A
9bd81a18b9
Use native OpenSSL 1.0 static build for Windows
2018-04-27 01:54:28 +03:00
z3APA3A
836fffddbe
Include openssl/applink.c in windows plugin DLL
2018-04-25 14:38:32 +03:00
z3APA3A
e2906f1219
pass version thorugh building environment
2018-04-21 03:26:49 +03:00
z3APA3A
7423cd0112
Clearing LdapPlugin compilation issues
2018-04-06 17:45:18 +03:00
z3APA3A
22ac04576f
Change SSLv23_*_method to TLS_*_method for OpenSSL 1.1
2018-02-17 18:14:59 +03:00
z3APA3A
2a781c4a9d
Fix: TransparentPlugin for *BSD ipfw
2017-11-06 18:41:36 +03:00
z3APA3A
930a959779
Do not use SAISNULL in plugin
2017-10-30 18:20:14 +03:00
z3APA3A
ff1a560547
Add NULLADDR to prevent dynamic linkage error under Linux
2017-10-30 18:10:25 +03:00
z3APA3A
4bb706d140
Use parsehostname in TransparentPlugin
2017-10-30 13:43:53 +03:00
z3APA3A
2c8bf28065
Remove static to prevent race conditions
2017-10-18 17:07:12 +03:00
z3APA3A
8c372572fc
Add check for nul address
2017-10-17 18:25:35 +03:00
z3APA3A
18c1ce0a22
Support for transparent / notransparent commands added
2017-10-17 18:00:09 +03:00
z3APA3A
b99fa7aaa4
Simplify transparent + add support for BSD PF/IPF
2017-10-17 17:07:35 +03:00
z3APA3A
68deec5bcd
Update PCRE version
2016-12-24 01:48:52 +03:00
z3APA3A
3c9ff54ae8
SSL_Plugin: switch to SHA-256 signature
2016-12-22 19:16:50 +03:00
z3APA3A
945c30c5ee
Use pragma aux to export valid names from DLL in Watcom
2016-12-12 19:49:58 +03:00
z3APA3A
c650d32206
Compatibility with Watcom's DLL exports for plugins
2016-12-10 03:56:11 +03:00
z3APA3A
ccbc94e06b
Revert "pam_auth; lock only pam_start"
...
This reverts commit 556fea670e
2016-05-11 22:05:45 +03:00
z3APA3A
556fea670e
pam_auth; lock only pam_start
2016-05-11 20:51:14 +03:00
z3APA3A
32ff114787
Revert "pam_auth: Authenticate all users in single session"
...
This reverts commit 438a5bac9b
2016-05-11 20:49:39 +03:00
z3APA3A
438a5bac9b
pam_auth: Authenticate all users in single session
2016-05-11 19:56:40 +03:00
z3APA3A
4cb43b438f
Use mutex with pam auth, because pam is not thread safe
2016-05-11 19:03:16 +03:00
z3APA3A
6db42f70e9
fix compilation warnings in PamAuth
2016-02-26 13:15:34 +03:00
z3APA3A
57f1140734
Changes in makefiles to support LDAP plugin compilation
2016-02-22 21:46:32 +03:00
z3APA3A
c96d415020
Defer SSL init to first command in ssl_plugin
2016-02-22 21:14:17 +03:00
z3APA3A
6fcd12cb08
TransparentPlugin - remove debug output
2016-02-19 17:10:15 +03:00
z3APA3A
3b8e7741b3
Compilation warnings cleanup
2016-02-16 15:29:51 +03:00
z3APA3A
e312a1aa11
Fileplugin: commands added
...
file_cachedir /path/to/cache/
h_preview 32768
2015-12-28 17:11:07 +03:00
z3APA3A
22e7d9cdae
SSL plugin commands renamed
...
plugin /path/to/SslPlugin.dll ssl_plugin
ssl_certcache /path/to/cache/
ssl_mitm
proxy -p3128
ssl_nomitm
proxy -p3129
2015-12-28 16:28:26 +03:00
z3APA3A
347d7736c7
ssl_plugin: configuration commands added
...
plugin /path_to/SslPlugin.dll ssl_plugin
ssl_certpath /path_to/certificates/
ssl_strip
proxy -p3128
ssl_nostrip
proxy -p3129
2015-12-28 15:57:47 +03:00
z3APA3A
d21f6b198d
fix static memory free() attempt
2015-09-04 00:28:26 +03:00
z3APA3A
184eede38a
Typo in pamauth corrected
2015-07-05 14:51:30 +03:00
z3APA3A
1ab94fa002
SSLPlugin: add SNI to server request
2015-05-16 18:14:35 +03:00
z3APA3A
d4f4e4a807
Deadlock in SSLPlugin corrected
...
deadlock due to typo in previous SSL patch
2015-05-04 18:12:46 +03:00
z3APA3A
522e6732fe
SSLPlugin race condition fix
...
+ minor corrections to PCREPlugin
2015-03-02 21:05:29 +03:00
z3APA3A
e37a7f48d7
Older CVS comments removed
2014-12-13 23:20:00 +03:00
z3APA3A
db5c4b1255
more changes for IPv6 client support
2014-10-21 06:00:56 +04:00
Vladimir Dubrovin
e3144dc61b
ldapauth memory leak fixed
...
Привет !
Исправил старую багу по утечки памяти в плагине .. теперь вообще не
течет ,
глупая ошибка.. Вот так 3,5 года не попрограммируеш , срузу ошибку
найдеш :)
--
Kirill Lopuchov
2014-05-04 23:10:14 +04:00
Vladimir Dubrovin
6a0b78268f
Adding icons, resolving MinGW compilation
2014-04-13 18:41:25 +04:00
Vladimir Dubrovin
2b0f8bbcfc
Add icon, resolve MinGW compilation issues
2014-04-13 18:26:32 +04:00
Vladimir Dubrovin
2890f06488
traffic counters are changed to 64-bit
...
traffic counters are changed to 64-bit using pstdint.h
2014-04-10 03:34:59 +04:00
Vladimir Dubrovin
094a4440e6
more files removed
2014-04-09 01:45:13 +04:00
Vladimir Dubrovin
a3ffc7dc3b
removing autogenerated files
2014-04-09 01:37:27 +04:00
z3APA3A
a060376f1e
initial import to git
2014-04-08 13:03:21 +04:00
