search

Topazstix / sandrop

Automatically exported from code.google.com/p/sandrop
0 stars 0 forks source link

Transparent ssl proxy - resolving hostnames #69

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
Using iptables logging to retrive tcp address before redirection is made.

New process is spawned to capture information from /proc/kmsg or NFLOG table 
depending on /proc/net/ip_tables_targets

After that ssl handshake is made to retrive server certificate data.

This certificate data is then used to generate new server certificate signed by 
SandroProxy CA to present to client.

Original issue reported on code.google.com by supp.san...@gmail.com on 27 Apr 2013 at 2:33

GoogleCodeExporter commented 8 years ago 
Main development branch for this feature
http://code.google.com/p/sandrop/source/detail?r=952acd8dcda16ef429ca4d08dbbce5a
4261beddd&name=1_4_61_transparent_proxy_ssl_hostname

Original comment by supp.san...@gmail.com on 27 Apr 2013 at 6:16

GoogleCodeExporter commented 8 years ago

Original comment by supp.san...@gmail.com on 6 May 2013 at 3:54