ProxHTTPSProxyMII: Development
|
Jun. 19, 2014, 04:28 AM
Post: #46
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 19, 2014 04:13 AM)JJoe Wrote: First, I want to retest the socket error. I still had ProxHTTPSProxy in the chain. I haven't seen the socket error while testing without ProxHTTPSProxy. I did, however, just experience a long stall while signing in at yahoo without ProxHTTPSProxy. So the error may not be a problem. |
|||
Jun. 20, 2014, 02:20 AM
(This post was last modified: Jun. 21, 2014 01:45 AM by JJoe.)
Post: #47
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 19, 2014 04:05 AM)whenever Wrote: JJoe, would you like to write a new readme and update the instructions on configuring the script to work with Proxomitron? Is this close? Edit: See attachment |
|||
Jun. 20, 2014, 10:43 AM
Post: #48
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
Well done!
(Jun. 20, 2014 02:20 AM)JJoe Wrote: The client (probably a browser) believes the front server is the target server (probably a https website). The client knows the front server is a proxy because we have to explicitly set it. (Jun. 20, 2014 02:20 AM)JJoe Wrote: More detail: I know what you mean but I think the "converts the connection to https" and the vice versa are not accurate. They are different connections living in the different places in the chain. What about using ProxHTTPSProxy.png to describe the details? BTW, I wasn't able to build an exe version. I am still working on it. |
|||
Jun. 20, 2014, 01:59 PM
Post: #49
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 20, 2014 10:43 AM)whenever Wrote: Well done! Not yet! I just wanted some comment before continuing. (Jun. 20, 2014 10:43 AM)whenever Wrote:(Jun. 20, 2014 02:20 AM)JJoe Wrote: The client (probably a browser) believes the front server is the target server (probably a https website). I worried about that part. You are correct, of course. (Jun. 20, 2014 10:43 AM)whenever Wrote: What about using ProxHTTPSProxy.png to describe the details? Accepted and easier. My tradition is that readme is a stand-alone text document. More later. |
|||
Jun. 21, 2014, 02:18 AM
(This post was last modified: Jun. 22, 2014 05:23 AM by JJoe.)
Post: #50
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
Second published draft.
I need to take a break. So... Is there anything missing and etc? Edit: Moved to attachment. |
|||
Jun. 22, 2014, 05:17 AM
Post: #51
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
Third published draft.
Code: ProxHTTPSProxy creates two local servers, "front" and "rear", |
|||
Jun. 22, 2014, 12:14 PM
Post: #52
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
Finally got an exe version working. http://proxfilter.net/ProxHTTPSProxy0.8d.zip 4.5MB.
The only external dependency is OpenSSL, and the "Visual C++ 2008 Redistributables" that OpenSSL needs. You need to restart your computer after OpenSSL installation to make its binary work. JJoe, thanks for the document work. I will check it later. Time to have a break now. |
|||
Jun. 22, 2014, 05:25 PM
Post: #53
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 22, 2014 12:14 PM)whenever Wrote: Finally got an exe version working. http://proxfilter.net/ProxHTTPSProxy0.8d.zip 4.5MB. Firefox will not import the new "CA.crt", however. firefox Wrote:This is not a certificate authority certificate, so it can't be imported into the certificate authority list. I have found https://support.mozilla.org/en-US/questions/687567 and http://stackoverflow.com/questions/13332...h-makecert |
|||
Jun. 23, 2014, 09:37 AM
Post: #54
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 22, 2014 05:17 AM)JJoe Wrote: Will the ProxHTTPSProxy certificate store be updated? This is not needed for updating the "cacert.pem". You only HAVE TO do it after you change the "CA.crt", which is used to sign those site certificates. (Jun. 22, 2014 05:25 PM)JJoe Wrote: Firefox will not import the new "CA.crt", however. Thanks for the clue. Please download again and let me know it works now. The installation part of the doc could be simplified if it works. Would you advise a new name for this proxy or just keep it as is? |
|||
Jun. 23, 2014, 04:00 PM
(This post was last modified: Jun. 24, 2014 02:17 AM by JJoe.)
Post: #55
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 23, 2014 09:37 AM)whenever Wrote: You only HAVE TO do it after you change the "CA.crt", which is used to sign those site certificates. I had not considered that. It is a 10 year cert. I saw the cache as a possible privacy issue. It will show browsing history. (Jun. 23, 2014 09:37 AM)whenever Wrote:(Jun. 22, 2014 05:25 PM)JJoe Wrote: Firefox will not import the new "CA.crt", however. Glad it worked! (Jun. 23, 2014 09:37 AM)whenever Wrote: Would you advise a new name for this proxy or just keep it as is? Other proxies are using the first ProxHTTPSProxy. The two ProxHTTPSProxys have different abilities. The first ProxHTTPSProxy can use socks, http, and https proxies. The second can only use https proxies but supports verification. If both groups of users seek help, one name could be a problem. I would change it but I don't think it has to be a new name. I have been using ProxHTTPSProxyMII for the second version. Also, I have changed __version__ to 0.8dpy, "py" to distinguish it from the new "exe" version. But, whatever you decide is perfectly ok. You won't have to use the readme either. Do you want to have a "py" and an "exe" package? http://prxbx.com/forums/showthread.php?t...8#pid16488 Looking forward to ProxHTTPSProxyMIII!!! Will test and more. Edit: Clarity and more |
|||
Jun. 25, 2014, 08:58 AM
Post: #56
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 23, 2014 04:00 PM)JJoe Wrote: I had not considered that. It is a 10 year cert. For anyone who worries that a site could use that CA to fake https, I added a function that the program will create a new CA if you delete the bundled one. (Jun. 23, 2014 04:00 PM)JJoe Wrote: I have been using ProxHTTPSProxyMII for the second version. You got it! (Jun. 23, 2014 04:00 PM)JJoe Wrote: You won't have to use the readme either. I will definitely use it, until you think the program is ready to be out of beta. I don't have much time to fully test it and have to count on you. v0.9 adds bypass function. The python version is attached, and the exe version here: http://proxfilter.net/ProxHTTPSProxyMII0.9.zip . |
|||
Jun. 26, 2014, 03:01 AM
(This post was last modified: Jun. 26, 2014 02:02 PM by JJoe.)
Post: #57
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
The PY version is very good.
The exe is having problems, however. After commenting out "yahoo.com" and "yimg.com" in "ProxHTTPSProxy.ini" and emptying certs cache, yahoo.com eventually loads without some yimg resources. To get more resources, I remove ".yimg.com.crt" from the cert cache and load a missing image to create a new cert. Sometimes, the cert I remove is missing the Private Key but not always. ProxHTTPSProxy log window shows: log.txt (Size: 13.07 KB / Downloads: 828) Edit: Moved log to attachment |
|||
Jun. 26, 2014, 03:51 AM
Post: #58
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
(Jun. 26, 2014 03:01 AM)JJoe Wrote: The exe is having problems, however. It looks like it failed to speak SSL. Could you please try to import the exe CA to the store again? (Jun. 26, 2014 03:01 AM)JJoe Wrote: Sometimes, the cert I remove is missing the Private Key but not always. The exe version uses OpenSSL command line to create certs, and my current routine is not reliable if multiple threads are doing the same thing. So don't empty those certs unless you change the CA. |
|||
Jun. 26, 2014, 06:04 AM
Post: #59
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program | |||
Jun. 26, 2014, 10:40 PM
Post: #60
|
|||
|
|||
RE: ProxHTTPSProxy, a Proxomitron SSL Helper Program
A little more info...
These errors occured while using IE11, visiting site for first time with a clean install of ProxHTTPSProxy 0.9 exe. Code: [16:18:22] "GET https://farm6.staticflickr.com/5489/14482714055_1583998180_s.jpg The images did load after reloading the page, however. These errors have not been seen again. So, I may be seeing two kinds of errors while using the exe. 1. Incomplete cert generated. 2. Good cert generated but somehow misapplied. |
|||
« Next Oldest | Next Newest »
|