111 Commits

Author	SHA1	Message	Date
Maximilian Hils	dbadc1b613	clean up cert handling, fix mitmproxy/mitmproxy#472	2015-03-07 01:22:02 +01:00
Maximilian Hils	da1eb94ccd	100% test coverage 🎉	2015-02-27 22:02:52 +01:00
Maximilian Hils	224f737646	add option to log ssl keys ... refs mitmproxy/mitmproxy#475	2015-02-27 16:59:29 +01:00
Maximilian Hils	438c1fbc7d	TCPClient: Use TLS1.1+ where available, BaseHandler: disable SSLv2	2014-12-15 12:32:36 +01:00
Aldo Cortesi	c56e7a90d8	Fix tracebacks in connection finish	2014-11-15 12:31:13 +13:00
Aldo Cortesi	0811a9ebde	.flush can raise NetlibDisconnect. This fixes a traceback found in fuzzing.	2014-11-07 16:01:41 +13:00
Maximilian Hils	ed5e685565	refactor tcp close, fix mitmproxy/mitmproxy#376	2014-10-22 17:54:20 +02:00
Maximilian Hils	29a4e91050	fix mitmproxy/mitmproxy#375	2014-10-17 18:48:30 +02:00
Maximilian Hils	e6a8730f98	fix tcp closing for ssled connections	2014-10-09 04:42:39 +02:00
Maximilian Hils	fdb6f5552d	CertStore: add support for cert chains	2014-10-08 20:46:30 +02:00
Maximilian Hils	274688172d	fix mitmproxy/mitmproxy#373	2014-10-08 18:40:46 +02:00
Maximilian Hils	e73a2dbab1	minor changes	2014-09-28 03:15:26 +02:00
Aldo Cortesi	b21df0cf44	Merge branch 'master' of ssh.github.com:cortesi/netlib	2014-09-09 10:10:10 +12:00
Aldo Cortesi	63c1efd394	Remove avoidable imports from OpenSSL ... Fixes #38	2014-09-09 10:08:56 +12:00
Maximilian Hils	f90ea89e69	more verbose errors	2014-09-08 18:38:05 +02:00
Aldo Cortesi	f98989b075	Merge branch 'master' into mitmproxy_issue_341 ... Conflicts: netlib/tcp.py	2014-09-07 12:39:59 +12:00
Aldo Cortesi	3b81d678c4	Use print function after future import	2014-09-07 11:24:41 +12:00
Maximilian Hils	4bf7f3c0ff	set source_address if not manually specified	2014-09-04 16:55:02 +02:00
Maximilian Hils	ec628bc37d	fix tcp.Address inequality comparison	2014-09-04 01:10:44 +02:00
Maximilian Hils	3d489f3bb7	adapt netlib.wsgi to changes in mitmproxy/mitmproxy#341	2014-09-03 17:15:50 +02:00
Maximilian Hils	6d1b601ddf	minor cleanups	2014-08-16 15:53:07 +02:00
kronick	197dae9183	Made attribute optional (as it is in pyOpenSSL) ... See 0d7e8a1af2 -- It looks like this constant isn't set on some platforms (including Raspberry Pi's libssl)	2014-07-29 15:12:13 +02:00
Maximilian Hils	66ac56509f	add support for ctx.load_verify_locations, refs mitmproxy/mitmproxy#174	2014-05-21 01:14:55 +02:00
Maximilian Hils	71834aeab1	make cert and key mandatory	2014-05-15 14:15:33 +02:00
Maximilian Hils	a8345af282	extract cert creation to be accessible in handle_sni callbacks	2014-05-15 13:51:59 +02:00
Maximilian Hils	4bd15a28b7	fix #28	2014-03-10 17:43:39 +01:00
Aldo Cortesi	2a12aa3c47	Support Ephemeral Diffie-Hellman	2014-03-07 16:38:50 +13:00
Aldo Cortesi	86730a9a4c	Handler convert_to_ssl now takes a key object, not a path.	2014-03-05 13:43:52 +13:00
Aldo Cortesi	cfaa3da25c	Use PyOpenSSL's underlying ffi interface to get current cipher for connections.	2014-03-02 21:37:28 +13:00
Aldo Cortesi	e381c03668	Cleanups, tests, and no-cover directives for code sections we can't test.	2014-03-02 16:47:10 +13:00
Aldo Cortesi	3443bae94e	Cipher suite selection for client connections, improved error handling	2014-02-27 18:35:16 +13:00
Maximilian Hils	c276b4294c	allow super() on TCPServer, add thread names for better debugging	2014-02-15 23:16:28 +01:00
Maximilian Hils	7fc544bc7f	adjust netlib.wsgi to reflect changes in mitmproxys flow format	2014-02-05 21:34:14 +01:00
Maximilian Hils	0bbc40dc33	store used sni in TCPClient, add equality check for tcp.Address	2014-02-04 04:51:41 +01:00
Maximilian Hils	dc45b4bf19	move StateObject back into libmproxy	2014-01-31 01:06:53 +01:00
Maximilian Hils	ff9656be80	remove subclassing of tuple in tcp.Address, move StateObject into netlib	2014-01-30 20:07:30 +01:00
Maximilian Hils	e18ac4b672	re-add server attribute to BaseHandler	2014-01-28 20:30:16 +01:00
Maximilian Hils	763cb90b66	add tcp.Address to unify ipv4/ipv6 address handling	2014-01-28 17:26:35 +01:00
Maximilian Hils	d0a6d2e254	fix tests, remove duplicate code	2014-01-09 05:33:21 +01:00
Maximilian Hils	951f2d517f	change parameter names to reflect changes	2014-01-09 01:57:37 +01:00
Maximilian Hils	f2e8efdf15	merge smurfix/ipv6, add ipv6 support for TCPServer, add ipv6 test	2013-12-13 15:04:38 +01:00
Matthias Urlichs	6f26cec83e	tab fix	2013-12-12 07:11:13 +01:00
Matthias Urlichs	a7ac97eb82	support ipv6	2013-12-12 07:00:58 +01:00
Aldo Cortesi	4840c6b3bf	Fix race condition in test suite.	2013-12-08 15:26:30 +13:00
Aldo Cortesi	d05c20d8fa	Domain checks for persistent cert store is now irrelevant. ... We no longer store these on disk, so we don't care about path components.	2013-12-08 13:15:08 +13:00
Aldo Cortesi	98a580cf69	Merge pull request #19 from rouli/ciphersuites ... adding cipher list selection option to BaseHandler	2013-12-07 15:51:44 -08:00
Aldo Cortesi	ed74b62856	Merge branch 'fix_invalid_tcp_close'	2013-12-08 10:15:43 +13:00
Aldo Cortesi	5aad09ab81	Fix client certificate request feature.	2013-12-08 10:15:19 +13:00
Aldo Cortesi	7428f95474	Handle interrupted system call errors.	2013-08-25 10:22:09 +12:00
Israel Nir	d5b3e397e1	adding cipher list selection option to BaseHandler	2013-08-21 13:42:30 +03:00