search

gumblex / ptproxy

Turn any pluggable transport for Tor into an obfuscating TCP tunnel.
MIT License
160 stars 43 forks source link

Solved: Is there any possible to set server cert argument manually? #11

Closed mhtvsSFrpHdE closed 8 years ago

mhtvsSFrpHdE commented 8 years ago

We want use same config file anywhere for our private users. I noticed the readme file,

"ptname": "obfs4",
    // [Client] PT arguments
    "ptargs": "cert=AAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;iat-mode=0",

but what about server side? How to use specify server cert area, and not the random?

mhtvsSFrpHdE commented 8 years ago

I see... the server cert area storage in a private key file called "obfs4_state.json" and can't be changed manually. But backup this file and use it in other server will enable same cert area, so we still can use same cert for each client and server.

twisteroidambassador commented 8 years ago

For obfs4proxy, server side certificate can be specified by providing the following options: node-id, private-key, public-key, drbg-seed, iat-mode. These options have the same meaning as the ones in obfs4_state.json.

Also check out my project here: https://github.com/twisteroidambassador/pluggabletransportadapter. It is better documented and may fit your need.