v0.3.1

Changed

• The command line ends through duho.run: Ctrl-C outside netproxy run ends with status
  130 and a closed standard output with status 1, both without a traceback. netproxy run
  still stops on Ctrl-C with status 0. --help, --version and a usage error still raise
  SystemExit.
• The cli extra needs duho>=0.7.8,<0.8 (was >=0.7.0).

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Added

• Routing: Router, Rule, Route (direct, TLS with a client credential,
  reject; optional upstream) and matchers in netproxy.rules (host globs,
  regex, ports, CIDR networks, paths, listeners, combinable with &, |,
  ~).
• Credential: a client certificate for mTLS from an sslcontext keystore
  (Windows certificate store, PKCS#11 smart cards and HSMs), an identity or
  PEM, built on first use.
• AsyncProxyServer / ProxyServer: an HTTP proxy (CONNECT, forwarded
  http:// requests upgraded to HTTPS by rule, /proxy.pac), local
  Tunnel ports, upstream proxy chaining through a proxylib ProxyMap with
  failover, loopback-only unless allow_remote=True.
• TLS interception (netproxy.intercept) with a CA name-constrained to the
  intercepted hosts.
• Recording (netproxy.recording): a Recorder hook per relayed session,
  LogRecorder, and PcapRecorder (extra capture) writing each session
  as a TCP connection in a pcap/pcapng file; keylog= writes the TLS
  secrets of every TLS connection the proxy owns (OpenSSL 1.1.1 or later;
  refused where the TLS library cannot log keys).
• Configuration files (netproxy.config, default netproxy/netproxy.cfg),
  read with anycfg: TOML, or YAML (extra yaml), JSON or INI when the
  first line says so (#!yaml).
• The netproxy command line
  (run, check, pac, ca init, ca show; extra cli).

Changed

• A pem credential's certificate may be a PKCS#12 bundle (.p12/.pfx)
  or DER; password_file names a file holding the key's or bundle's
  password, read only when needed (requires sslcontext 2.1).
• Requires proxylib 2: answers are read with proxylib.lookup, and
  egress = "system" is auto_proxy(environ={}) (the OS's settings only).
• Rewritten from scratch on asyncio and the standard library's ssl.
  Twisted, the WSGI hosting and the TOML schema of 0.2 are gone; nothing of
  the 0.2 API remains.

Full Changelog: https://github.com/jose-pr/netproxy/commits/v0.3.0