Commit graph

35 commits

Author SHA1 Message Date
Sven Geuer
351d2dffc3
Use OPENSSL_VERSION_NUMBER to compile code matching the applied libssl version.
This renders Makefile.ssl11 redundant.
2024-01-30 19:47:34 +01:00
Sven Geuer
945f205796
Deprecate -L/--tlsenforce and -T/--no-ssl3. 2024-01-30 19:46:15 +01:00
Sven Geuer
a425fa20d8 On SSL connections, introduce authentication by client certificate 2023-12-11 18:31:42 +01:00
Sven Geuer
a65239015d Correct derivation of peer_host
Combine the derivations from proxy_arg and args_info.host_arg.
2023-12-10 22:45:17 +01:00
Sven Geuer
097a0a2453 Honor -o/--host on determining the SNI host name 2023-12-02 19:54:02 +01:00
Sven Geuer
470ac87f73 Use alloca() instead of malloc()
This make code more readable and spares us some explicit calls to
free().
2023-12-02 19:37:56 +01:00
Sven Geuer
08d0552ef4 Remediate faulty patch for #57 2023-09-04 12:43:45 +02:00
Mark Janssen -- Sig-I/O Automatisering
4bac945fc7
Apply patch to fix: #57 2022-05-28 15:56:31 +02:00
David
8cfcd00045 Document CA file & dir compiler options
and fix a trivia typo
2021-08-04 19:03:12 -07:00
David
a269b94ad8 Accept alt ca_file and ca_dir as compiler options 2021-08-04 18:13:37 -07:00
David
e448313d68 Add option for local default OpenSSL 1.1 CA file
Provides non-empty default for Homebrew on macOS
2021-08-04 17:06:14 -07:00
Mark Janssen -- Sig-I/O Automatisering
69c48599e4
Error handling on SSL_new and SSL_connect 2021-01-28 22:55:15 +01:00
Mark Janssen -- Sig-I/O Automatisering
cb336cab71
Apply debian patch 003_socket_write_loop.patch 2020-05-07 17:02:39 +02:00
Mark Janssen -- Sig-I/O Automatisering
5f2a02b34b
Temporary ugly fix for building with openssl1.0 or 1.1
Use either make -f Makefile.ssl1o or make -f Makefile.ssl11
When using OpenSSL1.0 or 1.1 based systems
2019-06-28 13:39:54 +02:00
Adam Gołębiowski
b8c1586071 ptstream.c: fix openssl-1.1 warnings 2018-09-23 16:11:21 +02:00
Dirk Stoecker
02896a593a set proper SNI name in all use cases 2018-03-06 11:52:30 +01:00
Stephen Kent
655845108c Add an option to provide a CA cert for server certificate verification
Enable this option with -C/--cacert
2016-08-18 10:26:41 -07:00
Stephen Kent
5a7692f28f Add SSL certificate verification support and enable it by default
Disable SSL certificate verification with -z/--no-check-certificate
2016-08-18 10:24:11 -07:00
Stephen Kent
4554d4b801 Add an option to disable SSLv3
Disable SSLv3 with the option -T/--no-ssl3
2016-08-18 10:21:48 -07:00
Mathieu CARBONNEAUX
583d6ac96e SNI support
add SNI support
2016-08-07 19:47:51 +02:00
Mathieu CARBONNEAUX
988322682f add SNI support
add primilary SNI support
2016-08-05 15:18:34 +02:00
Daniel Jonka
a2f6ebeff2 fixed compiler warnings 2016-02-03 18:02:23 +01:00
Daniel Jonka
a3a1ffa8b3 added commandline option to enforce using TLSv1_client_method() instead of SSLv3_client_method() for compatibility reasons
(based on thieso2's fork of proxytunnel - just optional this time)
2016-02-03 16:26:24 +01:00
wicher
2a26224b5f Allow TLS 2015-04-26 13:07:13 +02:00
Mark Janssen
632919f59c Cleanup some ifdefs
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@222 bc163920-b10d-0410-b2c5-a5491ca2ceef
2008-02-26 23:32:02 +00:00
Mark Janssen
447d80b687 Only use SSLv3 as pointed out by Martin Fotak
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@220 bc163920-b10d-0410-b2c5-a5491ca2ceef
2008-02-20 16:24:09 +00:00
Dag Wieers
5cffce4172 Cosmetic changes and vim improvements.
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@204 bc163920-b10d-0410-b2c5-a5491ca2ceef
2008-01-27 10:04:23 +00:00
Dag Wieers
4ab2eb5b48 Reformatted sourcecode.
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@203 bc163920-b10d-0410-b2c5-a5491ca2ceef
2008-01-22 23:52:42 +00:00
Mark Janssen
b164da388f Re-Indenting
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@200 bc163920-b10d-0410-b2c5-a5491ca2ceef
2008-01-22 22:56:15 +00:00
Dag Wieers
688f352eb4 Added vim config instruction to not use spaces.
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@198 bc163920-b10d-0410-b2c5-a5491ca2ceef
2008-01-22 17:12:21 +00:00
Mark Janssen
917a5c435d revert last patch, I had NTLM working with r154, this broke again with 155
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@157 bc163920-b10d-0410-b2c5-a5491ca2ceef
2007-04-13 08:54:13 +00:00
Mark Janssen
9fd5bfe8d5 NTLM/SSL fixes by Taco IJsselmuiden <taco@varda.nl>
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@155 bc163920-b10d-0410-b2c5-a5491ca2ceef
2007-04-12 11:31:17 +00:00
Mark Janssen
3c52e456fc More fixes in SSL and string handling
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@148 bc163920-b10d-0410-b2c5-a5491ca2ceef
2007-03-05 09:08:10 +00:00
Mark Janssen
8d4f353e2e ssl fix from Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@144 bc163920-b10d-0410-b2c5-a5491ca2ceef
2007-02-23 15:54:37 +00:00
Mark Janssen
bbda7f9734 - Applied (reworked) changes from Mark Cave-Ayland to support -E option
encrypting data to the proxy with SSL (untested by me)
- Change version to 1.6.4


git-svn-id: https://proxytunnel.svn.sourceforge.net/svnroot/proxytunnel/trunk/proxytunnel@143 bc163920-b10d-0410-b2c5-a5491ca2ceef
2007-02-12 20:48:17 +00:00