SuppSandroB/sandrop

Transparent ssl proxy - resolving hostnames

Closed this issue · 2 comments

Using iptables logging to retrive tcp address before redirection is made.

New process is spawned to capture information from /proc/kmsg or NFLOG table 
depending on /proc/net/ip_tables_targets

After that ssl handshake is made to retrive server certificate data.

This certificate data is then used to generate new server certificate signed by 
SandroProxy CA to present to client.


Original issue reported on code.google.com by supp.san...@gmail.com on 27 Apr 2013 at 2:33

Main development branch for this feature
http://code.google.com/p/sandrop/source/detail?r=952acd8dcda16ef429ca4d08dbbce5a
4261beddd&name=1_4_61_transparent_proxy_ssl_hostname

Original comment by supp.san...@gmail.com on 27 Apr 2013 at 6:16

Original comment by supp.san...@gmail.com on 6 May 2013 at 3:54

  • Changed state: Fixed