Permalink
Commits on Mar 27, 2016
  1. SSLsplit 0.5.0 release

    committed Mar 27, 2016
  2. Add autossl to NEWS

    committed Mar 27, 2016
  3. Merge branch 'feature/autossl' into develop

    Issue:		#87
    Contributed by:	Richard Poole
    committed Mar 27, 2016
  4. Remove debug printf

    committed Mar 27, 2016
  5. Handle inbound EOF before outbound CONNECTED

    Fix segmentation fault upon receiving BEV_EVENT_EOF on the inbound
    bufferevent while the outbound bufferevent has not received
    BEV_EVENT_CONNECTED yet.
    
    Issue:		#124
    Patch by:	Eun Soo Park
    committed Mar 27, 2016
Commits on Mar 25, 2016
  1. Test dnsbase and evbase for !NULL before freeing

    Fix segmentation fault upon exiting the main loop that was introduced
    when evdns initialization was made optional, resulting in dnsbase
    elements not always being initialized.
    
    Introduced in:	0e2b748
    committed Mar 25, 2016
  2. Update khash.h to latest version

    committed Mar 25, 2016
  3. Update NEWS

    committed Mar 25, 2016
  4. Modernize DHE and ECDHE support

    Enable full strength DHE and ECDHE by default in order to allow modern
    browsers to connect without weak crypto warnings.
    
    Issue:		#119
    Reported by:	@curioustwo
    committed Mar 25, 2016
  5. Add exception handler to logger, exit on errors

    Add exception handler mechanism to logger and use that to exit cleanly
    when sslsplit fails to write to a log file or fails to open a log file.
    
    Issue:		#113
    Reported by:	Matthias Kadenbach
    committed Mar 25, 2016
  6. Update copyright notices to 2016

    committed Mar 25, 2016
  7. Fix Travis build by disabling tests using IPv6

    TravisCI has removed IPv6 support in 2016.  To cope with this regression
    in the testing infrastructure, disable all tests on Travis that depend
    on the system being able to handle ::1 as an IP address.  Normal unit
    testing still uses the full test suite.
    committed Mar 25, 2016
Commits on Mar 16, 2016
Commits on Mar 15, 2016
  1. Initialize proxy before daemonizing

    Issue:		#104
    committed Mar 15, 2016
  2. Fix the SSL session timeout calculation

    Issue:		#115
    Reported by:	Eun Soo Park
    committed Mar 15, 2016
  3. Update NEWS.md

    committed Mar 15, 2016
  4. Add support for XNU 3247.1.106, 3247.10.11 and 3248.20.55

    Add XNU headers for OS X 10.11, 10.11.1 and 10.11.2.
    committed Mar 15, 2016
Commits on Nov 8, 2015
  1. Fix bev write handler for other->closed case

    When other->closed is set, the bufferevent write handler accesses
    other->bev even though it is invalid.  Fix this access, and as added
    layer of defense against future bugs, set ->bev to NULL whenever
    invalidating it, except where the connection is torn down completely.
    
    Reported by:	Eun Soo Park
    Introduced in:	2bcfaf4 17d753f
    Issue:		#109
    committed Nov 8, 2015
Commits on Nov 1, 2015
  1. Fix NULL pointer dereference in bev write handler

    Only manipulate other->bev if it is not NULL to avoid a NULL pointer
    dereference in the proxy bufferevent write handler when only one
    direction is fully established, for example during connection shutdown.
    
    Reported by:	@david-holonet
    Introduced in:	2bcfaf4
    Issue:		#109
    committed Nov 1, 2015
Commits on Oct 25, 2015
  1. Re-enable EV_READ if disabled and outbuf empty

    The event buffer write handler failes to re-enable the corresponding
    read event of the opposite connection if the buffer is not only down to
    less than half the limit, but completely emptied.  In that case, the
    read event would never be re-enabled and the connection would stall and
    time out.
    
    Issue:		#109
    Patch by:	Eun Soo Park
    committed Oct 25, 2015
Commits on Oct 9, 2015
  1. Add log to PCAP conversion script

    Add contributed python script for parsing the output of sslsplit -L
    from a log file or named pipe and converting the log entries to an
    emulated PCAP format.  Information not contained in the log, such as
    sequence numbers, IP IDs etc is emulated and does not correspond to the
    original packets on the network.
    
    Issue:		#27
    Contributed by:	Maciej Kotowicz
    committed Oct 9, 2015
Commits on Sep 28, 2015
  1. Add log parsing script for sslsplit -L

    Add contributed script to read and parse the output of sslsplit -L from
    a named pipe or log file and post-process the logged connection data
    programmatically from python.
    
    Issue:		#27
    Contributed by:	Maciej Kotowicz
    committed Sep 28, 2015