gfwleak/k18-ntcs-web-ntc
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

代理拦截修改提交

Browse Source
This commit is contained in:
wangxin
2019-05-21 19:50:54 +08:00
parent ac52747686
commit 182a6a8ddc
34 changed files with 2489 additions and 188 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
src/main/resources/messages/message_en.properties
View File

@@ -1542,4 +1542,39 @@ mirror_addr_type=Address Type
target_name=Target Name
traffic_mirror_address=Traffic Mirror Address
content_name=Content Name
none_profile_tip=Please Choose Profile Info!
none_profile_tip=Please Choose Profile Info!
#---------------------------pxy intercept------------------------------------
min_should_less_than_max=The min SSL version should less than the max SSL version
exclusions_ev_cert=Exclusion EV Cert
exclusions_cert_transparency=Exclusion Cert Transparency
exclusions_client_cert_req=Exclusion Client Cert Request
exclusions_pinning=Exclusion Pinning
cert_verify_approach_cn=Approach CN
cert_verify_approach_issuer=Approach Issuer
cert_verify_approach_self_signed=Approach Self Signed
cert_verify_approach_expiration=Approach Expiration
cert_verify_approach_fail_method=Fail Method
ssl_ver_min=Min SSL Version
ssl_ver_max=Max SSL Version
ssl_ver_mirror_client=Mirror Client
decrypt_mirror_enable=Mirror Enable
decrypt_mirror_mirror_profile=Mirror Profile
exclusions=Exclusions
ev_cert=EV Cert
cert_transparency=Cert Transparency
client_cert_req=Client Cert Request
pinning=Pinning
cn=CN
self_signed=Self Signed
expiration=Expiration
approach=Approach
cert_verify=Cert Verify
ssl_version=SSL Version
mirror_client=Mirror Client
min=Min
max=Max
decrypt_mirror=Decrypt Mirror
enable=Enable
forward=Forward
decrypt_mirror_enable_on=if the enable option value is '1', the Mirror profile is needed
ssl_ver_mirror_client_on=if the mirror client option value is '1', the min SSL version and the max SSL version will be ignored

37
src/main/resources/messages/message_ru.properties
View File

@@ -1544,4 +1544,39 @@ mirror_addr_type=Address Type
target_name=Target Name
traffic_mirror_address=Traffic Mirror Address
content_name=Content Name
none_profile_tip=Please Choose Profile Info!
none_profile_tip=Please Choose Profile Info!
#---------------------------pxy intercept------------------------------------
min_should_less_than_max=The min SSL version should less than the max SSL version
exclusions_ev_cert=Exclusion EV Cert
exclusions_cert_transparency=Exclusion Cert Transparency
exclusions_client_cert_req=Exclusion Client Cert Request
exclusions_pinning=Exclusion Pinning
cert_verify_approach_cn=Approach CN
cert_verify_approach_issuer=Approach Issuer
cert_verify_approach_self_signed=Approach Self Signed
cert_verify_approach_expiration=Approach Expiration
cert_verify_approach_fail_method=Fail Method
ssl_ver_min=Min SSL Version
ssl_ver_max=Max SSL Version
ssl_ver_mirror_client=Mirror Client
decrypt_mirror_enable=Mirror Enable
decrypt_mirror_mirror_profile=Mirror Profile
exclusions=Exclusions
ev_cert=EV Cert
cert_transparency=Cert Transparency
client_cert_req=Client Cert Request
pinning=Pinning
cn=CN
self_signed=Self Signed
expiration=Expiration
approach=Approach
cert_verify=Cert Verify
ssl_version=SSL Version
mirror_client=Mirror Client
min=Min
max=Max
decrypt_mirror=Decrypt Mirror
enable=Enable
forward=Forward
decrypt_mirror_enable_on=if the enable option value is '1', the Mirror profile is needed
ssl_ver_mirror_client_on=if the mirror client option value is '1', the min SSL version and the max SSL version will be ignored

37
src/main/resources/messages/message_zh_CN.properties
View File

@@ -1542,4 +1542,39 @@ mirror_addr_type=\u76EE\u6807\u6807\u8BC6\u7C7B\u578B
target_name=\u76EE\u6807\u540D\u79F0
traffic_mirror_address=\u6D41\u91CF\u8F6C\u53D1\u76EE\u7684\u5730\u5740
content_name=\u5185\u5BB9\u540D\u79F0
none_profile_tip=Please Choose Profile Info!
none_profile_tip=Please Choose Profile Info!
#---------------------------pxy intercept------------------------------------
min_should_less_than_max=\u6700\u5C0FSSL\u7248\u672C\u5E94\u5C0F\u4E8E\u6700\u5927SSL\u7248\u672C
exclusions_ev_cert=\u6392\u9664EV\u8BC1\u4E66
exclusions_cert_transparency=\u6392\u9664\u8BC1\u4E66\u900F\u660E
exclusions_client_cert_req=\u6392\u9664\u5BA2\u6237\u7AEF\u8BC1\u4E66\u8BF7\u6C42
exclusions_pinning=\u6392\u9664Pinning
cert_verify_approach_cn=\u63A5\u8FD1CN
cert_verify_approach_issuer=\u63A5\u8FD1\u53D1\u5E03\u8005
cert_verify_approach_self_signed=\u63A5\u8FD1\u81EA\u7B7E\u540D
cert_verify_approach_expiration=\u63A5\u8FD1\u8FC7\u671F
cert_verify_fail_method=\u5931\u8D25\u65B9\u6CD5
ssl_ver_min=\u6700\u5C0FSSL\u7248\u672C
ssl_ver_max=\u6700\u5927SSL\u7248\u672C
ssl_ver_mirror_client=\u955C\u50CF\u5BA2\u6237\u7AEF
decrypt_mirror_enable=\u542F\u7528\u955C\u50CF
decrypt_mirror_mirror_profile=\u955C\u50CF\u6982\u8981
exclusions=\u6392\u9664
ev_cert=EV\u8BC1\u4E66
cert_transparency=\u8BC1\u4E66\u900F\u660E
client_cert_req=\u5BA2\u6237\u7AEF\u8BC1\u4E66\u8BF7\u6C42
pinning=Pinning
cn=CN
self_signed=\u81EA\u7B7E\u540D
expiration=\u8FC7\u671F
approach=\u63A5\u8FD1
cert_verify=\u8BC1\u4E66\u9A8C\u8BC1
ssl_version=SSL\u7248\u672C
mirror_client=\u955C\u50CF\u5BA2\u6237\u7AEF
min=\u6700\u5C0F
max=\u6700\u5927
decrypt_mirror=\u89E3\u5BC6\u955C\u50CF
enable=\u542F\u7528
forward=Forward
decrypt_mirror_enable_on=\u5982\u679C\u542F\u52A8\u9009\u9879\u7684\u503C\u662F1\uFF0C\u5219\u955C\u50CF\u6587\u4EF6\u9009\u9879\u9700\u8981\u9009\u62E9
ssl_ver_mirror_client_on=\u5982\u679C\u955C\u50CF\u5BA2\u6237\u7AEF\u9009\u9879\u7684\u503C\u662F1\uFF0C\u5219\u6700\u5927\u6700\u5C0FSSL\u7248\u672C\u53F7\u4F1A\u88AB\u5FFD\u7565

5
src/main/resources/service/service_config.xml
View File

@@ -271,10 +271,11 @@
<service id="512" functionId="200" serviceType="1" tableName="cfg_index_info" className="CfgIndexInfo" desc="拦截监测">
<serviceCfg cfgType="1" tableName="ip_port_cfg" ></serviceCfg>
<serviceCfg cfgType="2" tableName=" http_url_cfg" ></serviceCfg>
<userRegion regionKey="keyring_id" regionColumn="userRegion1" userRegionPosition="0" ></userRegion>
<!-- <userRegion regionKey="keyring_id" regionColumn="userRegion1" userRegionPosition="0" ></userRegion>
<userRegion regionKey="DOMAIN_ID" regionColumn="compileId" userRegionPosition="0"></userRegion>
<userRegion regionKey="DOMAIN_STR" regionColumn="cfgKeywords" userRegionPosition="0"></userRegion>
<userRegion regionKey="DOMAIN_INTENSITY" regionColumn="userRegion5" userRegionPosition="0"></userRegion>
<userRegion regionKey="DOMAIN_INTENSITY" regionColumn="userRegion5" userRegionPosition="0"></userRegion> -->
<userRegion regionKey="" regionColumn="userRegion1" userRegionPosition="0" ></userRegion>
</service>
<!-- <service id="513" functionId="201" serviceType="1" tableName="cfg_index_info" className="CfgIndexInfo" desc="域名拦截监测">
<serviceCfg cfgType="2" tableName="http_url_cfg" ></serviceCfg>

14
src/main/resources/sql/20190521/intercept_policy.sql Normal file
View File

@@ -0,0 +1,14 @@
#fail method字典
INSERT INTO `sys_data_dictionary_name`(`id`, `module_name`, `mark`, `remark`, `revision`, `create_time`, `modify_time`, `status`) VALUES (154, 'fail_method', 'FAIL_METHOD', '用于代理拦截策略', NULL, '2019-05-09 11:01:16', '2019-05-09 11:01:21', 1);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4096, 'pass-through', 'Pass-Through', '默认', 1, 1, 1, 154);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4097, 'fail-close', 'Fail-Close', NULL, 2, 1, 1, 154);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4098, 'ignore', 'Ignore', NULL, 3, 1, 1, 154);
#SSL version字典
INSERT INTO `sys_data_dictionary_name`(`id`, `module_name`, `mark`, `remark`, `revision`, `create_time`, `modify_time`, `status`) VALUES (155, 'SSL_VERSION', 'SSL_VERSION', '用于代理拦截策略，SSL版本', NULL, '2019-05-09 11:50:43', '2019-05-09 11:50:46', 1);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4099, 'ssl3', 'SSLv3', 'min default', 1, 1, 1, 155);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4100, 'tls10', 'TLSv1.0', NULL, 2, 1, 1, 155);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4101, 'tls11', 'TLSv1.1', NULL, 3, 1, 1, 155);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4102, 'tls12', 'TLSv1.2', NULL, 4, 1, 1, 155);
INSERT INTO `sys_data_dictionary_item`(`id`, `item_code`, `item_value`, `item_desc`, `item_sort`, `status`, `type`, `dictionary_id`) VALUES (4103, 'tls13', 'TLSv1.3', 'max default', 5, 1, 1, 155);