TechnikEmpire / HttpFilteringEngine

Transparent filtering TLS proxy.
Mozilla Public License 2.0
60 stars 33 forks source link

Need to handle IP-only TLS HTTP connection #98

Open TechnikEmpire opened 7 years ago

TechnikEmpire commented 7 years ago

Currently whenever a TLS connection comes in, we check it to extract the SNI extension to get our upstream host.

Pretty sure SNI doesn't get set when a direct (by IP only) connection takes place. Need to investigate this to see if we're handling this properly.