mirror of
https://github.com/3proxy/3proxy.git
synced 2025-02-24 02:55:40 +08:00
63 lines
1.6 KiB
HTML
63 lines
1.6 KiB
HTML
<h3>3proxy SSL/TLS plugin</h3>
|
|
|
|
Plugin can be used to transparently decypher SSL/TLS data and TLS encryption to proxy.
|
|
potential securiy reasons.
|
|
|
|
|
|
|
|
<pre>
|
|
ssl_certcache PATH_TO_CACHE
|
|
ssl_mitm
|
|
ssl_nomitm
|
|
ssl_srvcert
|
|
ssl_srvkey
|
|
ssl_serv
|
|
ssl_noserv
|
|
</pre>
|
|
|
|
<h4>For transparent certificate spoofing:</h4>
|
|
|
|
ssl_certcache - path to certificates cache. For transparent spoofing cache must contain 3 files: 3proxy.pem - public
|
|
self-signed certificates, 3proxy.key - key for public certificates, server.key - this key will be used to generates
|
|
spoofed certificates.
|
|
Generated certificates will be placed to the same path.
|
|
<br>ssl_mitm - spoof certificates for services started below. Using ssl_mitm is insecure, because proxy does not check certificates.
|
|
<br>ssl_nomitm - do not spoof certificates for services started below
|
|
|
|
|
|
<h4>Example:</h4>
|
|
<pre>
|
|
plugin /path/to/SslPlugin.dll ssl_plugin
|
|
ssl_certcache /path/to/cache/
|
|
ssl_mitm
|
|
proxy -p3128
|
|
ssl_nomitm
|
|
proxy -p3129
|
|
</pre>
|
|
<h4>To protect traffic to server (https:// proxy) - since 0.9.5 version</h4>
|
|
ssl_srvcert - Server certificate (should not be selfsigned and must contain Alternative name)
|
|
ssl_srvkey - Server ceritifacte key
|
|
ssl_serv - require TLS connection for services below
|
|
ssl_noserv - do not require TLS connection for services below
|
|
|
|
Example:
|
|
<pre>
|
|
plugin /path/to/SSLPlugin.so ssl_plugin
|
|
ssl_srvcert path_to_cert
|
|
ssl_srvkey path_to_key
|
|
ssl_serv
|
|
proxy -p33128
|
|
ssl_noserv
|
|
proxy -p3128
|
|
</pre>
|
|
creates https:// proxy on 33128 and http:// proxy on 3128
|
|
|
|
|
|
|
|
<h4>Download:</h4>
|
|
<ul>
|
|
<li>Plugin included into 3proxy 0.8
|
|
</ul>
|
|
|
|
© Vladimir Dubrovin, License: BSD style
|