View Issue Details

IDProjectCategoryView StatusLast Update
0002250GNUnetGNSpublic2012-11-05 17:34
Reporterschanzen Assigned Toschanzen Due Date
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.9.4Fixed in Version0.9.4 
Summary0002250: GNS proxy needs to speak SSL
DescriptionThe proxy does not speak SSL atm. Maybe use SSLsniff to implement this. The proxy needs to validate the server side certificate via LEHO and then generate its own for the .gnunet request for the client to verify (ie to make the browser happy)
TagsNo tags attached.

Activities

schanzen

2012-05-14 22:26

administrator   ~0005894

After some research I think it makes sense to use ss5p as a basis and then port the certificate generation from sslsniff into this. The http parsing can be done using mhd and curl.

One disadvantage will be that we always have to mitm for ssl. Even for non .gnunet enabled services.

* http://code.google.com/p/ss5p
* http://www.thoughtcrime.org/software/sslsniff/

schanzen

2012-06-11 21:50

administrator   ~0006043

In SVN

Issue History

Date ModifiedUsernameFieldChange
2012-04-02 11:00schanzenNew Issue
2012-04-02 11:00schanzenStatusnew => assigned
2012-04-02 11:00schanzenAssigned To => schanzen
2012-04-18 13:51Christian GrothoffSeverityminor => feature
2012-05-14 22:26schanzenNote Added: 0005894
2012-05-28 13:12Christian GrothoffProduct Version => Git master
2012-06-11 21:50schanzenNote Added: 0006043
2012-06-11 21:50schanzenStatusassigned => resolved
2012-06-11 21:50schanzenResolutionopen => fixed
2012-06-12 19:25Christian GrothoffFixed in Version => 0.9.4
2012-06-12 19:25Christian GrothoffTarget Version => 0.9.4
2012-11-05 17:34Christian GrothoffStatusresolved => closed