Skip to content

Commit 26ed5e7

Browse files
author
Andrea Sessa
committed
2 parents ca5f54d + 6f0a0d1 commit 26ed5e7

13 files changed

+575
-62
lines changed

CHANGES

Lines changed: 31 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,33 @@
1-
Changes with nginx-ssl-ja3 0.0.1 20 Aug 2017
1+
Changes nginx-ssl-ja3 v0.0.2 3 Jun 2019
2+
3+
nginx-ssl-ja3: nginx variables for ja3 fingerprint
4+
- nginx modules
5+
- features for ja3 are capture once on connection setup in nginx event openssl code
6+
- fixes grease values being included in eliptic curves values
7+
- patches OpenSSL to include some extra client extensions
8+
- extended_master_secret -> 23
9+
- compress_certificate -> 27
10+
- record_size_limit -> 28
11+
- session_ticket -> 35
12+
- fixes memory leak with unused ssl_session
13+
- tests
14+
- integration tests with t/http_ssl_ja3.t
15+
- documentation
16+
- better documentation how to build and setup
17+
- docker
18+
- better Dockerfile - no need of git checkout
19+
- travis
20+
- upgrade to ubuntu bionic
221

3-
*) nginx modules
4-
*) config
5-
*) http_ssl_ja3_hash variable
6-
*) stream_ssl_ja3_hash variable
7-
*) docker
8-
*) dockerfiles
9-
*) compose
10-
*) travis
1122

23+
Changes with nginx-ssl-ja3 0.0.1 20 Aug 2017
24+
25+
nginx-ssl-ja3: nginx variables for ja3 fingerprint
26+
- nginx modules
27+
- config
28+
- $http_ssl_ja3_hash variable
29+
- $stream_ssl_ja3_hash variable
30+
- docker
31+
- dockerfiles
32+
- compose
33+
- travis

COPYRIGHT

Lines changed: 0 additions & 30 deletions
This file was deleted.

COPYRIGHT.md

Lines changed: 169 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,169 @@
1+
# Copyright
2+
3+
[TOC]
4+
5+
NGINX
6+
------
7+
8+
```
9+
-----------------------------------------------------------------------------
10+
NGINX License
11+
12+
/*
13+
* Copyright (C) 2002-2016 Igor Sysoev
14+
* Copyright (C) 2011-2016 Nginx, Inc.
15+
* All rights reserved.
16+
*
17+
* Redistribution and use in source and binary forms, with or without
18+
* modification, are permitted provided that the following conditions
19+
* are met:
20+
* 1. Redistributions of source code must retain the above copyright
21+
* notice, this list of conditions and the following disclaimer.
22+
* 2. Redistributions in binary form must reproduce the above copyright
23+
* notice, this list of conditions and the following disclaimer in the
24+
* documentation and/or other materials provided with the distribution.
25+
*
26+
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
27+
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
28+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
29+
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
30+
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
31+
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
32+
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
33+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
34+
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
35+
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36+
* SUCH DAMAGE.
37+
*/
38+
-----------------------------------------------------------------------------
39+
```
40+
41+
OpenSSL
42+
-------
43+
44+
```
45+
LICENSE ISSUES
46+
==============
47+
48+
The OpenSSL toolkit stays under a double license, i.e. both the conditions of
49+
the OpenSSL License and the original SSLeay license apply to the toolkit.
50+
See below for the actual license texts.
51+
52+
OpenSSL License
53+
---------------
54+
55+
/* ====================================================================
56+
* Copyright (c) 1998-2018 The OpenSSL Project. All rights reserved.
57+
*
58+
* Redistribution and use in source and binary forms, with or without
59+
* modification, are permitted provided that the following conditions
60+
* are met:
61+
*
62+
* 1. Redistributions of source code must retain the above copyright
63+
* notice, this list of conditions and the following disclaimer.
64+
*
65+
* 2. Redistributions in binary form must reproduce the above copyright
66+
* notice, this list of conditions and the following disclaimer in
67+
* the documentation and/or other materials provided with the
68+
* distribution.
69+
*
70+
* 3. All advertising materials mentioning features or use of this
71+
* software must display the following acknowledgment:
72+
* "This product includes software developed by the OpenSSL Project
73+
* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
74+
*
75+
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
76+
* endorse or promote products derived from this software without
77+
* prior written permission. For written permission, please contact
78+
* openssl-core@openssl.org.
79+
*
80+
* 5. Products derived from this software may not be called "OpenSSL"
81+
* nor may "OpenSSL" appear in their names without prior written
82+
* permission of the OpenSSL Project.
83+
*
84+
* 6. Redistributions of any form whatsoever must retain the following
85+
* acknowledgment:
86+
* "This product includes software developed by the OpenSSL Project
87+
* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
88+
*
89+
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
90+
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
91+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
92+
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
93+
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
94+
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
95+
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
96+
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
97+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
98+
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
99+
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
100+
* OF THE POSSIBILITY OF SUCH DAMAGE.
101+
* ====================================================================
102+
*
103+
* This product includes cryptographic software written by Eric Young
104+
* (eay@cryptsoft.com). This product includes software written by Tim
105+
* Hudson (tjh@cryptsoft.com).
106+
*
107+
*/
108+
109+
Original SSLeay License
110+
-----------------------
111+
112+
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
113+
* All rights reserved.
114+
*
115+
* This package is an SSL implementation written
116+
* by Eric Young (eay@cryptsoft.com).
117+
* The implementation was written so as to conform with Netscapes SSL.
118+
*
119+
* This library is free for commercial and non-commercial use as long as
120+
* the following conditions are aheared to. The following conditions
121+
* apply to all code found in this distribution, be it the RC4, RSA,
122+
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
123+
* included with this distribution is covered by the same copyright terms
124+
* except that the holder is Tim Hudson (tjh@cryptsoft.com).
125+
*
126+
* Copyright remains Eric Young's, and as such any Copyright notices in
127+
* the code are not to be removed.
128+
* If this package is used in a product, Eric Young should be given attribution
129+
* as the author of the parts of the library used.
130+
* This can be in the form of a textual message at program startup or
131+
* in documentation (online or textual) provided with the package.
132+
*
133+
* Redistribution and use in source and binary forms, with or without
134+
* modification, are permitted provided that the following conditions
135+
* are met:
136+
* 1. Redistributions of source code must retain the copyright
137+
* notice, this list of conditions and the following disclaimer.
138+
* 2. Redistributions in binary form must reproduce the above copyright
139+
* notice, this list of conditions and the following disclaimer in the
140+
* documentation and/or other materials provided with the distribution.
141+
* 3. All advertising materials mentioning features or use of this software
142+
* must display the following acknowledgement:
143+
* "This product includes cryptographic software written by
144+
* Eric Young (eay@cryptsoft.com)"
145+
* The word 'cryptographic' can be left out if the rouines from the library
146+
* being used are not cryptographic related :-).
147+
* 4. If you include any Windows specific code (or a derivative thereof) from
148+
* the apps directory (application code) you must include an acknowledgement:
149+
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
150+
*
151+
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
152+
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
153+
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
154+
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
155+
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
156+
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
157+
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
158+
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
159+
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
160+
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
161+
* SUCH DAMAGE.
162+
*
163+
* The licence and distribution terms for any publically available version or
164+
* derivative of this code cannot be changed. i.e. this code cannot simply be
165+
* copied and put under another distribution licence
166+
* [including the GNU Public Licence.]
167+
*/
168+
169+
```

LICENSE

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
Copyright (C) 2017-2019 Paulo Pacheco
2+
All rights reserved.
3+
4+
Redistribution and use in source and binary forms, with or without
5+
modification, are permitted provided that the following conditions
6+
are met:
7+
1. Redistributions of source code must retain the above copyright
8+
notice, this list of conditions and the following disclaimer.
9+
2. Redistributions in binary form must reproduce the above copyright
10+
notice, this list of conditions and the following disclaimer in the
11+
documentation and/or other materials provided with the distribution.
12+
13+
THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
14+
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15+
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16+
ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
17+
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18+
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19+
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20+
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21+
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22+
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23+
SUCH DAMAGE.

README.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -155,6 +155,15 @@ and write the captured data on redis.
155155

156156
Currently we use an off-the-shelf redis gui to present the data, I am considering the idea to develop an ad-hoc interface.
157157

158+
159+
## Contributors
160+
161+
@**fooinha** - author
162+
163+
@**Sessa93**
164+
165+
@**bartebor**
166+
158167
## Fair Warning
159168

160169
**THIS IS NOT PRODUCTION** ready.

0 commit comments

Comments
 (0)