gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-5246 拦截状态下，使用未装根证书的 firefox 访问 twitter.com 时，功能端未检测出 Pinning 特征

Browse Source
This commit is contained in:
luwenpeng
2021-01-11 23:06:19 +06:00
parent 933f9e3b02
commit f99cfe9c1c
3 changed files with 19 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
platform/src/tcp_stream.cpp
View File

@@ -826,8 +826,20 @@ static void __stream_bev_eventcb(struct bufferevent * bev, short events, void *
{
if (_stream->session_type == STREAM_PROTO_SSL)
{
ssl_stream_log_error(bev, __bev_dir(_stream, bev), _stream->ssl_mgr);
}
unsigned long sslerr = ssl_stream_log_error(bev, __bev_dir(_stream, bev), _stream->ssl_mgr);
if (sslerr)
{
TFE_LOG_ERROR(g_default_logger, "%s %s connection error at tcp layer, ssl layer is unavailable", _stream->str_stream_addr, str_conn_dir);
enum ssl_stream_error error = SSL_STREAM_R_SERVER_PROTOCOL_ERROR;
if (__bev_dir(_stream, bev) == CONN_DIR_DOWNSTREAM)
{
error = SSL_STREAM_R_CLIENT_PROTOCOL_ERROR;
}
ssl_stream_set_cmsg_string(*ref_this_ssl_stream, TFE_CMSG_SSL_ERROR, ssl_stream_get_error_string(error));
ssl_stream_process_error(*ref_this_ssl_stream, sslerr, _stream->ssl_mgr);
}
}
else if (errno)
{
TFE_LOG_INFO(g_default_logger, "%s %s connection error, errno = %d, %s",