ssl - Implementing a Simple HTTPS Proxy Application with Java? -


i'm writing simple https proxy program java educational purposes. program listens on port (say 7443) incoming https requests browser (say firefox), parses request , forwards desired destination (say https://www.comodo.com).

firefox's proxy settings set use port ssl connections ( 127.0.0.1 : 7443 ).

my code short , simple:

static // initializer {     system.setproperty("javax.net.ssl.keystore", "mykeystore");     system.setproperty("javax.net.ssl.keystorepassword", "password"); }  sslserversocketfactory ssfactory = (sslserversocketfactory) sslserversocketfactory.getdefault();  try {     sslserversocket listener = (sslserversocket) ssfactory.createserversocket(port, 64);     listener.setuseclientmode(false);     listener.setwantclientauth(false);     listener.setneedclientauth(false);      sslsocket connection = (sslsocket) listener.accept();     browser.starthandshake();  /*  <<==  exception throws @ line  */  } catch (ioexception ex) {     ex.printstacktrace(system.err); }

but i'm catching following exception:

    javax.net.ssl.sslexception: unrecognized ssl message, plaintext connection?

the exception says connection plain-text, https connections firefox set use port. have logged firefox sending application this:

connect www.comodo.com:443 http/1.1 user-agent: mozilla/5.0 (x11; ubuntu; linux x86_64; rv:20.0) gecko/20100101 firefox/20.0 proxy-connection: keep-alive connection: keep-alive host: www.comodo.com

firefox talking palin-text, , think connect socks command (i'm not sure though), haven't set in firefox's socks settings. below screenshot of firefox's proxy settings:

firefox proxy settings

what missing here ?! need make work firefox or other browser ?!

------------------------------------------------------------------------------

for think duplicate of another question , has been answered in other 1 have say: yes, both questions have roots in similar problem answer in cited question directs @ using ssl sockets turned out misleading , resulted in new question. although aimed @ similar problem, question shows different , yet mislead path go solving problem , provide useful guidance future persons facing such problem.

get rid of ssl. process incoming connect command, make plaintext connection upstream server, , start copying bytes. browser , server speak ssl don't need @ all.


Comments

Post a Comment

Popular posts from this blog

php - Why I am getting the Error "Commands out of sync; you can't run this command now" -

the documentation of error mentioned in title says if commands out of sync; can't run command now in client code, calling client functions in wrong order. this can happen, example, if using mysql_use_result() , try execute new query before have called mysql_free_result(). can happen if try execute 2 queries return data without calling mysql_use_result() or mysql_store_result() in between. from here: http://dev.mysql.com/doc/refman/5.0/en/commands-out-of-sync.html but in first query not fetching data mysql database, inserting. , in second query getting data database. here code $connection = mysqli_connect("localhost","username","password","tbl_msgs"); if(mysqli_connect_errno($connection)) { die("failed connect mysql: " . mysqli_connect_error()); } $query = "insert users (total_comments, total_views) values ({$total_comments}, {$total_views});"; $query .= "insert msgs (no...
Read more

linux - Does gcc have any options to add version info in ELF binary file? -

i mean whether gcc can insert source code version infor elf binary section or similar. not want change source file, add info gcc option in makefile. you can emit version info text file, turn text file object file statically link executable. the first step simple have write code: script or write version info in format plain text file. write makefile rule produce version.o version.txt, using objcopy . you'll have object file 2 useful symbols defined in it: beginning , end of textual version info. add generated object executable, , you'll able access version 2 ways: running strings on binary, or writing code in application print version string (you'll need declare start , end symbols variables in header file).
Read more

java - Are there any classes that implement javax.persistence.Parameter<T>? -

i'm using named queries fetch entities database using jpa , hibernate , came across puzzling me: how come there no default implementations of javax.persistence.parameter interface? i rather impressed how @staticmetamodel used criteriabuilder in jpa2 meaning type safety , don't have mess around setting string names. wanted apply similar of jpa1 ejb's i'm working on: dealergroup_.class: public dealergroup_ { public parameter<integer> id = new parameterimpl<integer>("id"); /// etc... } dealergroupfacade.class: // ... public dealergroup fetch(integer id) { typedquery<dealergroup> query = em.createnamedquery("dealergroup.fetchbyid", dealergroup.class); query.setparameter(dealergroup_.id, query); return query.getsingleresult(); } // ... i surprised find there no implementations of parameter interface - of course, implement myself absence makes me suspicious may mistake using in way? should implementing parameter...
Read more