gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

未完成：在ssl_stream_free中检测pinning。

Browse Source
This commit is contained in:
zhengchao
2019-06-10 21:27:27 +08:00
parent f18c5efdb1
commit a396bec434
4 changed files with 85 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
plugin/business/ssl-policy/src/ssl_policy.cpp
View File

@@ -132,6 +132,11 @@ void intercept_param_new_cb(int table_id, const char* key, const char* table_lin
if(item && item->type==cJSON_String) param->ssl_min_version=sslver_str2num(item->valuestring);
item=cJSON_GetObjectItem(ssl_ver, "max");
if(item && item->type==cJSON_String) param->ssl_max_version=sslver_str2num(item->valuestring);
if(param->ssl_min_version<0||param->ssl_max_version<0)
{
param->mirror_client_version=1;
TFE_LOG_ERROR(enforcer->logger, "Invalid intercept parameter: ssl version = %s", item->valuestring);
}
}
item=cJSON_GetObjectItem(ssl_ver, "allow_http2");
if(item && item->type==cJSON_Number) param->allow_http2=item->valueint;