gfwleak/tango-kni
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改tableinfo, 修改证书校验初始值为-1

Browse Source
This commit is contained in:
崔一鸣
2019-09-19 11:36:11 +08:00
parent c23552de05
commit f8b1d371e3
2 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
conf/maat/maat_tableinfo.conf
View File

@@ -5,4 +5,5 @@
3 TSG_OBJ_IP_ADDR ip_plus -- 3 TSG_OBJ_IP_ADDR ip_plus --
4 PXY_INTERCEPT_DOMAIN expr utf8 utf8 yes 0 4 PXY_INTERCEPT_DOMAIN expr utf8 utf8 yes 0
4 TSG_OBJ_FQDN expr utf8 utf8 yes 0 4 TSG_OBJ_FQDN expr utf8 utf8 yes 0
4 TSG_OBJ_FQDN_CAT expr utf8 utf8 yes 0
5 COMPILE_ALIAS compile escape -- 5 COMPILE_ALIAS compile escape --

7
entry/src/kni_entry.cpp
View File

@@ -119,7 +119,7 @@ struct pme_info{
uint64_t ssl_client_side_latency; uint64_t ssl_client_side_latency;
char ssl_server_side_version[KNI_SYMBOL_MAX]; char ssl_server_side_version[KNI_SYMBOL_MAX];
char ssl_client_side_version[KNI_SYMBOL_MAX]; char ssl_client_side_version[KNI_SYMBOL_MAX];
uint64_t ssl_cert_verify; int64_t ssl_cert_verify;
char ssl_error[KNI_STRING_MAX]; char ssl_error[KNI_STRING_MAX];
//for dup traffic detect //for dup traffic detect
@@ -204,7 +204,7 @@ struct traceid2pme_search_cb_args{
static char* stream_errmsg_get(enum stream_error _errno){ static char* stream_errmsg_get(enum stream_error _errno){
switch(_errno){ switch(_errno){
case STREAM_ERROR_PENDING_NO_SYN: case STREAM_ERROR_PENDING_NO_SYN:
return (char*)"penging not syn"; return (char*)"pending not syn";
case STREAM_ERROR_SINGLE_DIR: case STREAM_ERROR_SINGLE_DIR:
return (char*)"single dir"; return (char*)"single dir";
case STREAM_ERROR_PROTOCOL_UNKNOWN: case STREAM_ERROR_PROTOCOL_UNKNOWN:
@@ -289,6 +289,7 @@ static struct pme_info* pme_info_new(const struct streaminfo *stream, int thread
void *logger = g_kni_handle->local_logger; void *logger = g_kni_handle->local_logger;
struct pme_info* pmeinfo = ALLOC(struct pme_info, 1); struct pme_info* pmeinfo = ALLOC(struct pme_info, 1);
pmeinfo->addr_type = (enum addr_type_t)stream->addr.addrtype; pmeinfo->addr_type = (enum addr_type_t)stream->addr.addrtype;
pmeinfo->ssl_cert_verify = -1;
uuid_t uu; uuid_t uu;
uuid_generate_random(uu); uuid_generate_random(uu);
uuid_unparse(uu, pmeinfo->stream_traceid); uuid_unparse(uu, pmeinfo->stream_traceid);
@@ -319,7 +320,7 @@ static int log_generate(struct pme_info *pmeinfo, void *local_logger){
//create cjson //create cjson
cJSON *log_obj = cJSON_CreateObject(); cJSON *log_obj = cJSON_CreateObject();
//stream_traceid //stream_traceid
cJSON_AddStringToObject(log_obj, "stream_traceid", pmeinfo->stream_traceid); cJSON_AddStringToObject(log_obj, "stream_trace_id", pmeinfo->stream_traceid);
//policy_id //policy_id
cJSON_AddNumberToObject(log_obj, "policy_id", pmeinfo->policy_id); cJSON_AddNumberToObject(log_obj, "policy_id", pmeinfo->policy_id);
//action //action