Closed claunia closed 5 years ago
Auto accept invalid SSL certificates such as self-signed certificates.
YEP! I can confirm..many people ask for HTTPS support!
Is this project still active, and if so, what was the status on this particular feature?
Yes the project is still active however detailed a more evaluation proved that SSL support is much more difficult that originally anticipated. I'm working on it though.
@tenox7, I've had good results just proxying wrp
's connection through sslstrip
.
+ subprocess.Popen(["sslstrip"], stdout=open(os.devnull,'w'), stderr=subprocess.STDOUT) # runs on port 10000 by default
+ QNetworkProxy.setApplicationProxy(QNetworkProxy(QNetworkProxy.HttpProxy, "localhost", 10000))
threading.Thread(target=run_proxy).start()
Wow this sounds great. Could you make a PR for this?
Thanks! Can you make it to a configurable option? eg SSLSTRIP=True|False
Wowww surfing with retro computers and break the ssl barier! That would be cool.
Not sure how to get this working.... Testing on Firefox. I tried it and it starts up stripssl, but it trows 501 errors:
192.168.178.2 - - [01/Jan/2019 15:48:49] code 501, message Unsupported method ('CONNECT') 192.168.178.2 - - [01/Jan/2019 15:48:49] "CONNECT incoming.telemetry.mozilla.org:443 HTTP/1.1" 501 - 192.168.178.2 - - [01/Jan/2019 15:48:49] code 501, message Unsupported method ('CONNECT') 192.168.178.2 - - [01/Jan/2019 15:48:49] "CONNECT incoming.telemetry.mozilla.org:443 HTTP/1.1" 501 - 192.168.178.2 - - [01/Jan/2019 15:48:55] code 501, message Unsupported method ('POST')
Try a web browser without HTTP 1.1 support.
sslstrip is working okish, cdp version will also support ssl natively, closing this
Some pages will stop, or are not, supporting HTTP anymore. WRP should handle the HTTPS protocol itself for browsers that predate the adequate SSL/TLS versions like MSIE 1.5 and Mosaic.