Proxomitron Reborn

[amy]

(Dec. 28, 2018 05:09 AM)mizzmona Wrote:  The main thing is that you do have to start the program fresh. After it starts, click to open the main window (from tray or taskbar) and then just tap the Alt key -- as you would normally, don't hold it down. The disappearing act only occurs once. To fix it, minimize the window or send it back to the tray; thereafter, when the main window is opened again and Alt is tapped, the key works as it should and accesses the drop menu.

I can reproduce it now --- I suspect it has to do with the exact visual styles that your OS is set to; I normally use "Flat Menus" and don't have the "Hide underlined letters for keyboard navigation" option set, in which case pressing Alt doesn't cause the UI to disappear. If I don't use Flat Menus then I can reproduce it... fortunately,, this means it might not be that difficult to fix.

(Dec. 28, 2018 12:22 PM)whenever Wrote:  This way we can always write http://local.ptron/xxx and https://local.ptron/xxx, and can assume they will be always routed to the right listener, while don't need to worry about what the real http port and https port are set to which numbers.

Click on those URLs, they all work (Of course if you don't have a local file named 'xxx', then it obviously will complain. But try this one: https://local.ptron/.pinfo/ )

(Dec. 28, 2018 12:22 PM)whenever Wrote:  BTW, is the RWIN issue fixed in the Reborn version, or do we still need that patch?

Unless I wrote it in the changelog or otherwise mentioned, you can assume behaviour hasn't changed from Scott's 4.5j. I never used that patch when I was still using (OpenSSL-patched) 4.5j, and did not notice any performance problems. I know it is easy to verify the value of RWIN, but is there an easy test of how it affects the performance? Either way, Proxomitron should not be explicitly setting RWIN so I'll remove that for 4.6.0.3 and see if I notice a difference.

(Dec. 28, 2018 06:32 PM)JJoe Wrote:  The rest of the problem must be the depreciation of SHA-1 certificates, https://www.chromium.org/Home/chromium-security/education/tls/sha-1 .

Opera (latest) now says either

opera Wrote:Invalid certificate

Opera cannot verify the identity of the server "www.prxbx.com", due to a certificate problem.
...
continue?

or

opera Wrote:Your connection is not private
You attempted to reach www.tbs-certificates.co.uk, but the server presented a certificate signed using a weak signature algorithm (such as SHA-1). This means that the security credentials the server presented could have been forged, and the server may not be the server you expected (you may be communicating with an attacker).

You cannot proceed because the website operator has requested heightened security for this domain.

Fortunately you can generate a certificate using RSA-SHA256 (or higher) --- simply select the desired Signature Algorithm in the Generate Certificate dialog. Note that this is just a convenience, and Proxomitron will work fine with any other certificate (proxcert.pem) to present to browsers as long as the version of OpenSSL it uses accepts it. You are not required to use that dialog to generate a certificate.