Sitelet https://web.archive.org/web/20220517115043/https://github.com/abhinavsingh/proxy.py/issues/1018
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[TlsInterception] Bypass interception for upstreams we are unable to intercept #1018

Open
abhinavsingh opened this issue Jan 20, 2022 · 1 comment
Open

[TlsInterception] Bypass interception for upstreams we are unable to intercept #1018

abhinavsingh opened this issue Jan 20, 2022 · 1 comment
Labels
Good First Issue Proposal Task

Comments

@abhinavsingh
Copy link
Owner

@abhinavsingh abhinavsingh commented Jan 20, 2022 •
edited

Several clients throw TLSV1_ALERT_UNKNOWN_CA alert. Example:

  • cloudresourcemanager.googleapis.com

Several clients throw ssl.SSLEOFError EOF occurred in violation of protocol (_ssl.c:997) alert. Example:

  • gateway.icloud.com
  • gs-loc.apple.com
  • p25-content.icloud.com
  • p57-content.icloud.com

Proxy should be able to auto-detect (which it already does when handling exceptions) such scenarios and bypass interception for such upstream endpoints.
@abhinavsingh abhinavsingh self-assigned this Jan 20, 2022
@abhinavsingh abhinavsingh added Task Proposal Good First Issue labels Jan 20, 2022
@abhinavsingh abhinavsingh removed their assignment Jan 20, 2022
@abhinavsingh
Copy link
Owner Author

@abhinavsingh abhinavsingh commented Jan 20, 2022

We must also inspect the diff between upstream vs generated certificate. We must try to copy as much information as possible in generated certificates. E.g. list of all common names.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Good First Issue Proposal Task
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@abhinavsingh