gnh1201/caterpillar
1
0
Fork 0
mirror of https://github.com/gnh1201/caterpillar.git synced 2025-05-11 20:21:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix SSL negotiation

Browse Source
This commit is contained in:
Namhyeon Go 2024-07-12 00:34:33 +09:00
parent e2442a6290
commit 9bf5078294
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -28,8 +28,8 @@ If you have a server that ***will be parasitized*** and you want to proxy it, yo
``` ```
[settings] [settings]
PORT=5555 PORT=5555
SERVER_URL=http://example.org SERVER_URL=localhost
SERVER_CONNECTION_TYPE=stateless SERVER_CONNECTION_TYPE=
CA_KEY=ca.key CA_KEY=ca.key
CA_CERT=ca.crt CA_CERT=ca.crt
CERT_KEY=cert.key CERT_KEY=cert.key
@ -39,6 +39,8 @@ CLIENT_ENCODING=utf-8
USE_EXTENSIONS=wayback.Wayback,bio.PyBio USE_EXTENSIONS=wayback.Wayback,bio.PyBio
``` ```
***Note***: If using Caterpillar Proxy (Python) alone, set `SERVER_URL=localhost`. Otherwise, use the endpoint URL of the Worker script (PHP or Java), e.g., `SERVER_URL=http://example.org`.
- (Optional) Create a certificate for SSL decryption - (Optional) Create a certificate for SSL decryption
```bash ```bash

7
server.py
View File

@ -240,13 +240,16 @@ def proxy_connect(webserver, conn):
except Exception as e: except Exception as e:
logger.error("[*] Skipping certificate issuance.", exc_info=e) logger.error("[*] Skipping certificate issuance.", exc_info=e)
certpath = "default.crt" certpath = "default.crt"
logger.info("[*] Certificate file: %s" % (certpath))
logger.info("[*] Private key file: %s" % (certkey))
# https://stackoverflow.com/questions/11255530/python-simple-ssl-socket-server # https://stackoverflow.com/questions/11255530/python-simple-ssl-socket-server
# https://docs.python.org/3/library/ssl.html # https://docs.python.org/3/library/ssl.html
context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER) context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
context.check_hostname = False context.check_hostname = False
context.verify_mode = ssl.CERT_NONE context.verify_mode = ssl.CERT_NONE
context.load_cert_chain(certpath, certkey) context.load_cert_chain(certfile=certpath, keyfile=certkey)
try: try:
# https://stackoverflow.com/questions/11255530/python-simple-ssl-socket-server # https://stackoverflow.com/questions/11255530/python-simple-ssl-socket-server
@ -254,7 +257,7 @@ def proxy_connect(webserver, conn):
data = conn.recv(buffer_size) data = conn.recv(buffer_size)
except ssl.SSLError as e: except ssl.SSLError as e:
logger.error( logger.error(
"[*] SSL negotiation failed. Check that the CA certificate is installed.", "[*] SSL negotiation failed.",
exc_info=e, exc_info=e,
) )
return (conn, b"") return (conn, b"")