This repository has been archived by the owner on May 24, 2022. It is now read-only.
Stud client mode #79
Merged
Stud client mode #79
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 4 commits
March 2, 2012 18:31
FIX on send PROXY header if handshake is not finished. FIX if client starts renegotiation and server continue to send data, or ring_down buffer is not empty. Add define to compile without defer accept for banners protocols
…more safe and prepare client certificate management. Add proxy line is performed only after handshake to prepare PROXY protocol extension to include SSL data.
|
Huh.. so idea is you act as a forward proxy for an http client talking in the clear? Interesting... |
|
(s/http client/any client really) |
|
I would be very interested in "reverse" Stud, this is:
Perhaps too complex for the original purpose of Stud :) |
|
In your shema client certificate presented by stud is configured on stud or passed to stud by the client in "specific" certificate? The last point need advanced dev and hard to do on my free time. |
|
Is it for an HTTP service ? i think it is more clean to store destination ip and returned PEM certificate into an http headers. |
|
My vision is that Stud is configured with the TLS client certificate, remote certificate validation options and so. In my case it's not for HTTP. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Add ssl client mode for bench or test purpose.
One commit modify FSM in normal (server) mode to prevent connection to backend in case of handshake failure.
What do you think about ?