Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Made attribute optional (as it is in pyOpenSSL) | kronick | 2014-07-29 | 1 | -1/+4 |
| | | | See https://github.com/pyca/pyopenssl/commit/0d7e8a1af28ab22950b21afa3fd451cec7dd5fdc -- It looks like this constant isn't set on some platforms (including Raspberry Pi's libssl) | ||||
* | add support for ctx.load_verify_locations, refs mitmproxy/mitmproxy#174 | Maximilian Hils | 2014-05-21 | 1 | -2/+4 |
| | |||||
* | make cert and key mandatory | Maximilian Hils | 2014-05-15 | 1 | -2/+2 |
| | |||||
* | extract cert creation to be accessible in handle_sni callbacks | Maximilian Hils | 2014-05-15 | 1 | -4/+11 |
| | |||||
* | fix #28 | Maximilian Hils | 2014-03-10 | 1 | -1/+3 |
| | |||||
* | Support Ephemeral Diffie-Hellman | Aldo Cortesi | 2014-03-07 | 1 | -1/+6 |
| | |||||
* | Handler convert_to_ssl now takes a key object, not a path. | Aldo Cortesi | 2014-03-05 | 1 | -1/+1 |
| | |||||
* | Use PyOpenSSL's underlying ffi interface to get current cipher for connections. | Aldo Cortesi | 2014-03-02 | 1 | -3/+13 |
| | |||||
* | Cleanups, tests, and no-cover directives for code sections we can't test. | Aldo Cortesi | 2014-03-02 | 1 | -3/+5 |
| | |||||
* | Cipher suite selection for client connections, improved error handling | Aldo Cortesi | 2014-02-27 | 1 | -3/+16 |
| | |||||
* | allow super() on TCPServer, add thread names for better debugging | Maximilian Hils | 2014-02-15 | 1 | -3/+6 |
| | |||||
* | adjust netlib.wsgi to reflect changes in mitmproxys flow format | Maximilian Hils | 2014-02-05 | 1 | -1/+1 |
| | |||||
* | store used sni in TCPClient, add equality check for tcp.Address | Maximilian Hils | 2014-02-04 | 1 | -1/+7 |
| | |||||
* | move StateObject back into libmproxy | Maximilian Hils | 2014-01-31 | 1 | -16/+5 |
| | |||||
* | remove subclassing of tuple in tcp.Address, move StateObject into netlib | Maximilian Hils | 2014-01-30 | 1 | -14/+31 |
| | |||||
* | re-add server attribute to BaseHandler | Maximilian Hils | 2014-01-28 | 1 | -1/+3 |
| | |||||
* | add tcp.Address to unify ipv4/ipv6 address handling | Maximilian Hils | 2014-01-28 | 1 | -14/+42 |
| | |||||
* | fix tests, remove duplicate code | Maximilian Hils | 2014-01-09 | 1 | -54/+37 |
| | |||||
* | change parameter names to reflect changes | Maximilian Hils | 2014-01-09 | 1 | -16/+13 |
| | |||||
* | merge smurfix/ipv6, add ipv6 support for TCPServer, add ipv6 test | Maximilian Hils | 2013-12-13 | 1 | -7/+8 |
|\ | |||||
| * | tab fix | Matthias Urlichs | 2013-12-12 | 1 | -1/+1 |
| | | |||||
| * | support ipv6 | Matthias Urlichs | 2013-12-12 | 1 | -4/+4 |
|/ | |||||
* | Fix race condition in test suite. | Aldo Cortesi | 2013-12-08 | 1 | -1/+0 |
| | |||||
* | Domain checks for persistent cert store is now irrelevant. | Aldo Cortesi | 2013-12-08 | 1 | -2/+3 |
| | | | | | We no longer store these on disk, so we don't care about path components. | ||||
* | Merge pull request #19 from rouli/ciphersuites | Aldo Cortesi | 2013-12-07 | 1 | -1/+3 |
|\ | | | | | adding cipher list selection option to BaseHandler | ||||
| * | adding cipher list selection option to BaseHandler | Israel Nir | 2013-08-21 | 1 | -1/+3 |
| | | |||||
* | | Merge branch 'fix_invalid_tcp_close' | Aldo Cortesi | 2013-12-08 | 1 | -0/+4 |
|\ \ | |||||
| * | | Fix client certificate request feature. | Aldo Cortesi | 2013-12-08 | 1 | -2/+2 |
| | | | |||||
| * | | compatibility fixes for windows | Maximilian Hils | 2013-08-19 | 1 | -1/+2 |
| | | | |||||
| * | | fix windows bugs | Maximilian Hils | 2013-08-17 | 1 | -0/+3 |
| |/ | |||||
* / | Handle interrupted system call errors. | Aldo Cortesi | 2013-08-25 | 1 | -1/+7 |
|/ | |||||
* | Revamp dummy cert generation. | Aldo Cortesi | 2013-08-12 | 1 | -1/+2 |
| | | | | We no longer use on-disk storage - we just keep the certs in memory. | ||||
* | Correct order of precedence for SSL errors. | Aldo Cortesi | 2013-08-11 | 1 | -2/+2 |
| | |||||
* | Better handling of cert errors. | Aldo Cortesi | 2013-08-10 | 1 | -0/+3 |
| | |||||
* | Clarify the interface for flush and close methods. | Aldo Cortesi | 2013-07-30 | 1 | -5/+5 |
| | |||||
* | Merge pull request #16 from mitmproxy/fix_socket_buffer | Aldo Cortesi | 2013-07-28 | 1 | -3/+12 |
|\ | | | | | attempt to fix 'half-duplex' TCP close sequence | ||||
| * | attempt to fix 'half-duplex' TCP close sequence | Maximilian Hils | 2013-06-17 | 1 | -3/+12 |
| | | |||||
* | | Add socket binding support for TCPClient | Andrey Plotnikov | 2013-07-07 | 1 | -1/+4 |
|/ | |||||
* | Add a request_client_cert argument to server SSL conversion. | Aldo Cortesi | 2013-05-13 | 1 | -4/+16 |
| | | | | | | | | | | By default, we now do not request the client cert. We're supposed to be able to do this with no negative effects - if the client has no cert to present, we're notified and proceed as usual. Unfortunately, Android seems to have a bug (tested on 4.2.2) - when an Android client is asked to present a certificate it does not have, it hangs up, which is frankly bogus. Some time down the track we may be able to make the proper behaviour the default again, but until then we're conservative. | ||||
* | Fix exception hierarchy. | Aldo Cortesi | 2013-05-05 | 1 | -2/+2 |
| | |||||
* | 100% test coverage. | Aldo Cortesi | 2013-03-03 | 1 | -1/+1 |
| | |||||
* | Make sni_handler an argument to BaseHandler.convert_to_ssl | Aldo Cortesi | 2013-02-25 | 1 | -20/+15 |
| | |||||
* | Housekeeping and cleanup, some minor argument name changes. | Aldo Cortesi | 2013-02-24 | 1 | -5/+5 |
| | |||||
* | More accurate description of an HTTP read error, make pyflakes happy. | Aldo Cortesi | 2013-02-24 | 1 | -2/+2 |
| | |||||
* | 100% test coverage | Aldo Cortesi | 2013-01-27 | 1 | -14/+7 |
| | |||||
* | Bump unit tests, fix two serious wee buglets discovered. | Aldo Cortesi | 2013-01-26 | 1 | -2/+2 |
| | |||||
* | Introduce the mock module to improve unit tests. | Aldo Cortesi | 2013-01-26 | 1 | -0/+6 |
| | | | | | There are a few socket corner-cases that are incredibly hard to reproduce in a unit test suite, so we use mock to trigger the exceptions instead. | ||||
* | Extract TCP test utilities into netlib.test | Aldo Cortesi | 2013-01-25 | 1 | -5/+6 |
| | |||||
* | Improve error signalling for client certificates. | Aldo Cortesi | 2013-01-20 | 1 | -3/+6 |
| | |||||
* | Beef up client certificate handling substantially. | Aldo Cortesi | 2013-01-20 | 1 | -1/+9 |
| |