2022-05-26 12:55:02 +00:00
# Changelog
2019-05-26 06:11:07 +00:00
2019-05-26 06:24:26 +00:00
2024-11-03 10:11:56 +00:00
## v1.9 (2024-11-03)
### Other
* Merge pull request #115 from adulau/dependabot/github_actions/actions/upload-artifact-4.4.3. [Alexandre Dulaunoy]
Bump actions/upload-artifact from 4.4.0 to 4.4.3
* Bump actions/upload-artifact from 4.4.0 to 4.4.3. [dependabot[bot]]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.0 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/50769540e7f4bd5e21e526ee35c689e35e0d6874...b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
* Merge pull request #113 from infokek/pcap-logger-original-timestamps. [Alexandre Dulaunoy]
Original PCAP timestamps instead of timeofday-generated
* Unused debug info removed. [infokek]
* Original pcap timestamps instead of timeofday-generated fix. [infokek]
* Merge pull request #114 from adulau/dependabot/github_actions/actions/upload-artifact-4.4.0. [Alexandre Dulaunoy]
Bump actions/upload-artifact from 4.3.6 to 4.4.0
* Bump actions/upload-artifact from 4.3.6 to 4.4.0. [dependabot[bot]]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.6 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
* Merge pull request #112 from adulau/dependabot/github_actions/actions/upload-artifact-4.3.6. [Alexandre Dulaunoy]
Bump actions/upload-artifact from 4.3.4 to 4.3.6
* Bump actions/upload-artifact from 4.3.4 to 4.3.6. [dependabot[bot]]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.4 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/0b2256b8c012f0828dc542b3febcab082c67f72b...834a144ee995460fba8ed112a2fc961b36a5ec5a)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
* Merge pull request #108 from adulau/dependabot/github_actions/ossf/scorecard-action-2.4.0. [Alexandre Dulaunoy]
Bump ossf/scorecard-action from 2.3.3 to 2.4.0
* Bump ossf/scorecard-action from 2.3.3 to 2.4.0. [dependabot[bot]]
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.3 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/dc50aa9510b46c811795eb24b2f1ba02a914e534...62b2cac7ed8198b15735ed49ab1e5cf35480ba46)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
* Merge pull request #111 from 1div0/ECH. [Alexandre Dulaunoy]
ECH
* Add ECH. [Peter Kovář]
* Add TLS Version 1.3 Handling. [Peter Kovář]
* Merge pull request #107 from adulau/dependabot/github_actions/actions/upload-artifact-4.3.4. [Alexandre Dulaunoy]
Bump actions/upload-artifact from 4.3.3 to 4.3.4
* Bump actions/upload-artifact from 4.3.3 to 4.3.4. [dependabot[bot]]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
* Merge pull request #106 from adulau/dependabot/github_actions/ossf/scorecard-action-2.3.3. [Alexandre Dulaunoy]
Bump ossf/scorecard-action from 2.3.1 to 2.3.3
* Bump ossf/scorecard-action from 2.3.1 to 2.3.3. [dependabot[bot]]
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/0864cf19026789058feabb7e87baa5f140aac736...dc50aa9510b46c811795eb24b2f1ba02a914e534)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
* Merge pull request #104 from adulau/dependabot/github_actions/actions/upload-artifact-4.3.3. [Alexandre Dulaunoy]
Bump actions/upload-artifact from 4.3.2 to 4.3.3
* Bump actions/upload-artifact from 4.3.2 to 4.3.3. [dependabot[bot]]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.2 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/1746f4ab65b179e0ea60a494b83293b640dd5bba...65462800fd760344b1a7b4382951275a0abb4808)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
* Merge pull request #102 from the-real-tokai/fix-fdatasync-osx. [Alexandre Dulaunoy]
Fix problematic fdatasync() call on macOS
* Fix problematic fdatasync() call on macOS. [Christian Rosentreter]
The fdatasync call generates a "implicit declaration of function 'fdatasync' is invalid in C99" warning when building for macOS (it's nowhere to be found in the system includes), but linking will eventually work fine because there is an unrelated syscall by the same name (different prototype), so it's not doing what it should. So lets not use it.
* Merge pull request #103 from adulau/dependabot/github_actions/actions/upload-artifact-4.3.2. [Alexandre Dulaunoy]
Bump actions/upload-artifact from 3.pre.node20 to 4.3.2
* Bump actions/upload-artifact from 3.pre.node20 to 4.3.2. [dependabot[bot]]
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.pre.node20 to 4.3.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/97a0fba1372883ab732affbe8f94b823f91727db...1746f4ab65b179e0ea60a494b83293b640dd5bba)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
...
* Update README.md. [Alexandre Dulaunoy]
* Update README.md. [Alexandre Dulaunoy]
* Update README.md. [Alexandre Dulaunoy]
* Create scorecard.yml. [Alexandre Dulaunoy]
* Merge pull request #98 from adulau/dependabot/github_actions/github/codeql-action-3. [Alexandre Dulaunoy]
Bump github/codeql-action from 2 to 3
* Bump github/codeql-action from 2 to 3. [dependabot[bot]]
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
* Merge pull request #92 from wllm-rbnt/dbg. [Alexandre Dulaunoy]
Set packet type for RAW PCAPs
* Merge branch 'adulau:master' into dbg. [wllm-rbnt]
* Set packet type for RAW PCAPs. [William Robinet]
* Merge pull request #93 from adulau/revert-88-raw-ip. [Alexandre Dulaunoy]
Revert "base: add support for "raw ip" captures"
* Revert "base: add support for "raw ip" captures" [Alexandre Dulaunoy]
* Merge pull request #88 from os12/raw-ip. [Alexandre Dulaunoy]
base: add support for "raw ip" captures
* Base: add support for "raw ip" captures. [Oleg Smolsky]
- there is no need to deal with L2 as it's not even there
* Merge pull request #91 from wllm-rbnt/dbg. [Alexandre Dulaunoy]
Implement compilation options
* Enable DEBUG flag differently. [William Robinet]
* Add compilation options to CMakeLists.txt. [William Robinet]
* Merge pull request #90 from adulau/dependabot/github_actions/actions/checkout-4. [Alexandre Dulaunoy]
Bump actions/checkout from 3 to 4
* Bump actions/checkout from 3 to 4. [dependabot[bot]]
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
* Merge pull request #86 from wllm-rbnt/sigs. [Alexandre Dulaunoy]
Connection tracker live list & purge
* Doc update. [William Robinet]
* Minor lint. [William Robinet]
* Add basic build script. [William Robinet]
* Add handlers for signals USR1 & 2. [William Robinet]
* Merge pull request #85 from wllm-rbnt/fixes. [Alexandre Dulaunoy]
Various fixes
* Remove unnecessary parens in return statements. [William Robinet]
* Initialize variables. [William Robinet]
* Remove unused variables. [William Robinet]
* Fix warning unused for unused variable & error handling. [William Robinet]
* Add missing return statements. [William Robinet]
* Merge pull request #84 from robert-scheck/cmake. [Alexandre Dulaunoy]
Use correct cmake GNUInstallDirs variables with their built-in defaults
* Use correct cmake GNUInstallDirs variables with their built-in defaults. [Robert Scheck]
GNUInstallDirs.cmake expects that at least one language is enabled before
including GNUInstallDirs.
See also: https://cmake.org/cmake/help/latest/command/install.html
* Merge pull request #83 from wllm-rbnt/lint. [Alexandre Dulaunoy]
Global code linting + various fixes
* Merge branch 'master' into lint. [wllm-rbnt]
* Fix README layout. [William Robinet]
* Rework Docker files & scripts. [William Robinet]
* Increase version in CMakeLists.txt. [William Robinet]
* Fix command in README.md. [William Robinet]
* Lint ALL the things ! [William Robinet]
* Remove old, unused files. [William Robinet]
* Convert remaining old-style function definitions. [William Robinet]
* [clang-format] Do NOT sort include directives. [William Robinet]
* Convert old-style function definitions. [William Robinet]
* Fix null analyzer instantiation. [William Robinet]
* Add clan-format config. [William Robinet]
2023-08-14 09:15:09 +00:00
## v1.8 (2023-08-14)
### Changes
2024-11-03 10:11:56 +00:00
* [doc/ref] version updated. [Alexandre Dulaunoy]
* [doc] version v1.8 released. [Alexandre Dulaunoy]
2023-08-14 09:15:09 +00:00
* [doc] typo fixed. [Alexandre Dulaunoy]
* [doc] v1.7 released + new changelog. [Alexandre Dulaunoy]
### Other
* Merge pull request #82 from wllm-rbnt/cmake. [Alexandre Dulaunoy]
cmake
* Add date to version output. [William Robinet]
* Add comment for MacOS. [William Robinet]
* Make it work on OpenBSD and FreeBSD. [William Robinet]
* Add install target for man page. [William Robinet]
* Set binary install target, update doc. [William Robinet]
* Update README & fix version. [William Robinet]
* Update gh workflows. [William Robinet]
* Print meaningful error messages. [William Robinet]
* Lower cmake version requirement (Ubuntu Focal) [William Robinet]
* Add FindJSONC.cmake module + fix CMakeLists.txt. [William Robinet]
* Remove autotools files. [William Robinet]
* Initial cmake setup. [William Robinet]
* Merge pull request #80 from wllm-rbnt/ts. [Alexandre Dulaunoy]
Add -z option for printing timestamps in front of TCP headers
* Add -z option for printing timestamps in front of TCP headers. [William Robinet]
* Merge pull request #79 from robert-scheck/dependabot. [Alexandre Dulaunoy]
Add dependabot configuration
* Add dependabot configuration. [Robert Scheck]
* Merge pull request #77 from robert-scheck/macos. [Alexandre Dulaunoy]
Add macOS to CI builds
* Add macOS to CI builds. [Robert Scheck]
* Merge pull request #76 from robert-scheck/workflow-compiler. [Alexandre Dulaunoy]
Switch to gcc-12 (default: gcc-11), clang-14 is newest in ubuntu-latest
* Switch to gcc-12 (default: gcc-11), clang-14 is newest in ubuntu-latest. [Robert Scheck]
2023-04-09 08:54:43 +00:00
## v1.7 (2023-04-09)
### Changes
* [doc] updated man page. [Alexandre Dulaunoy]
* [CREDITS] new contributor added. [Alexandre Dulaunoy]
* [doc] Add distribution including this version of ssldump. [Alexandre Dulaunoy]
* [doc] v1.6 released. [Alexandre Dulaunoy]
* [CREDITS] updated for version 1.6. [Alexandre Dulaunoy]
* [doc] v1.6 release included. [Alexandre Dulaunoy]
### Other
* Merge branch 'lord8266-tls1.3' [Alexandre Dulaunoy]
* Fix comment. [Vishwa Pravin]
* Remove irrelevant log entries, fix session ticket for tls1.2. [Vishwa Pravin]
* Adding tls1.3 decryption support. [Vishwa Pravin]
* Merge pull request #73 from robert-scheck/fedora. [Alexandre Dulaunoy]
Update Fedora link, mention RHEL/derivatives
* Update Fedora link, mention RHEL/derivatives. [Robert Scheck]
* Merge pull request #74 from robert-scheck/centos. [Alexandre Dulaunoy]
Fix typo, mention RHEL derivative
* Fix typo, mention RHEL derivative. [Robert Scheck]
* Merge pull request #69 from robert-scheck/ci-openssl. [Alexandre Dulaunoy]
* CI: libtls-dev -> libssl-dev. [Robert Scheck]
* Merge pull request #67 from robert-scheck/codeql-analysis. [Alexandre Dulaunoy]
Add CodeQL analysis
* Add CodeQL analysis. [Robert Scheck]
* Merge pull request #68 from robert-scheck/wrong-type. [Alexandre Dulaunoy]
For Y2K38 on 32 bit systems `time_t tv_sec` can be `long long`
* For Y2K38 on 32 bit systems `time_t tv_sec` can be `long long` [Robert Scheck]
* Merge pull request #66 from robert-scheck/ci-matrix. [Alexandre Dulaunoy]
Improve CI builds using matrix strategy
* Improve CI builds using matrix strategy. [Robert Scheck]
2023-02-03 05:35:39 +00:00
## v1.6 (2023-02-03)
### Changes
* [doc] v1.5 released. [Alexandre Dulaunoy]
* [doc] ChangeLog updated with release v1.5. [Alexandre Dulaunoy]
### Other
* Merge pull request #63 from wllm-rbnt/dev. [Alexandre Dulaunoy]
Fix missing port # in pcap files
* Fix missing port # in pcap files. [William Robinet]
* Merge pull request #61 from lord8266/aead. [Alexandre Dulaunoy]
Print MAC keys only for non AEAD ciphers
* Print MAC keys only for non AEAD ciphers. [Vishwa Pravin]
2022-05-26 12:55:02 +00:00
## v1.5 (2022-05-26)
2021-04-12 08:15:27 +00:00
2022-05-26 12:55:02 +00:00
### Changes
2021-04-12 08:15:27 +00:00
2022-05-26 12:55:02 +00:00
* [doc] An example use-case of JA3. [Alexandre Dulaunoy]
* [doc] Changelog updated. [Alexandre Dulaunoy]
### Other
* Merge pull request #60 from lord8266/max. [Alexandre Dulaunoy]
Add parentheses around MAX and MIN
* Add parentheses around MAX and MIN. [Vishwa Pravin]
* Merge pull request #58 from wllm-rbnt/dev. [Alexandre Dulaunoy]
Add support for pcap output to FIFO
* Add support for pcap output to FIFO. [William Robinet]
## v1.4 (2021-04-13)
### Changes
* [doc] v1.4 released. [Alexandre Dulaunoy]
* [doc] v1.4 released. [Alexandre Dulaunoy]
* [doc] cleanup README. [Alexandre Dulaunoy]
* [doc] v1.3 released. [Alexandre Dulaunoy]
### Other
* Merge pull request #54 from wllm-rbnt/dev. [Alexandre Dulaunoy]
2021-04-13 07:54:40 +00:00
Fix release version
2022-05-26 12:55:02 +00:00
* Fix release version. [William Robinet]
* Merge pull request #53 from wllm-rbnt/dev. [Alexandre Dulaunoy]
2021-04-12 08:15:27 +00:00
Add support for IPv6 traffic dump
2022-05-26 12:55:02 +00:00
* Add support for IPv6 traffic dump. [William Robinet]
* Merge pull request #51 from wllm-rbnt/dev. [Alexandre Dulaunoy]
2021-04-12 08:15:27 +00:00
dev 1.4 beta
2022-05-26 12:55:02 +00:00
* Fix ja3(s) length of strings used in MD5 computation + update MD5 functions. [William Robinet]
* Extract traffic mirroring commands from docker run scripts. [William Robinet]
* Add support for ja3 & ja3s. [William Robinet]
* Fix snprintf warning. [William Robinet]
* Fix file ownership in Dockerfiles. [William Robinet]
* Docker files initial import. [William Robinet]
* Bump version to 1.4b. [William Robinet]
## v1.3 (2021-02-02)
### Changes
* [doc] prepare for release v1.3. [Alexandre Dulaunoy]
* [copyright] added additional copyright for all new contribution. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
ssldump is collectively owned by all the contributors. There is no
change to the original license.
2022-05-26 12:55:02 +00:00
* [doc] man page fixed for copyright notice + README updated. [Alexandre Dulaunoy]
* [doc] William has a real name. [Alexandre Dulaunoy]
* [credits] updated. [Alexandre Dulaunoy]
* [doc] v1.2 released. [Alexandre Dulaunoy]
* [doc] v1.2 released. [Alexandre Dulaunoy]
### Other
* Merge pull request #49 from wllm-rbnt/leaks. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
Adjust copyright info
2022-05-26 12:55:02 +00:00
* Adjust copyright info. [William Robinet]
* Merge branch 'wllm-rbnt-leaks' [Alexandre Dulaunoy]
* Fix bug introduced in 64effa3bb93c3a219fb0afd868c5bc2609093ced. [William Robinet]
* Merge remote-tracking branch 'upstream/master' into leaks. [William Robinet]
* Merge pull request #46 from wllm-rbnt/leaks. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
Leaks
2022-05-26 12:55:02 +00:00
* Avoid leak in TCP segment reassembly code. [William Robinet]
* Clean remaining json object in case of error. [William Robinet]
* Abort properly on decode error. [William Robinet]
* Avoid client session_id related leak. [William Robinet]
* Avoid server_random related leak. [William Robinet]
* Avoid client_random related leak. [William Robinet]
* Check ssl_decode_enum() return code correctly. [William Robinet]
* Exit process_tcp_packet() in case TCP header is incomplete. [William Robinet]
* Check timestamp_diff return code correctly. [William Robinet]
* Cleanup before exit on error. [William Robinet]
* Fix for crash if length of captured frame is less than Ethernet header size. [William Robinet]
* Check packet size before looking at IP header. [William Robinet]
* Check return code after string extraction. [William Robinet]
* Limit length during server name decoding. [William Robinet]
* Bump version to 1.3 in configure.ac. [William Robinet]
* Decode ClientHello v2 properly. [William Robinet]
* Output error to stderr. [William Robinet]
* Add proper return value. [William Robinet]
* Avoid leak by freeing SSL decoding context properly. [William Robinet]
* Close everything properly in case of SIGINT. [William Robinet]
* Fix leak in associative array implementation. [William Robinet]
* Merge branch 'wllm-rbnt-json' [Alexandre Dulaunoy]
* Avoid some memory leaks. [William Robinet]
* Fix time struct related warning (2) [William Robinet]
* Fix time struct related warning. [William Robinet]
* Add checks for libjson-c to configure.ac. [William Robinet]
* Update CI workflow descriptions (2) [William Robinet]
* Update CI workflow descriptions. [William Robinet]
* First import of the JSON output code (https://github.com/adulau/ssldump/issues/41) [William Robinet]
* Do not print information message when no connection is cleaned at shutdown. [William Robinet]
* Fix memory leak in ssl_process_server_session_id() [William Robinet]
* Close global pcap struct properly in case of SIGINT. [William Robinet]
* Change binary installation directory to /usr/sbin. [William Robinet]
* Move unused files away. [William Robinet]
* Fix README.md - wrong package name for rpm based distros. [William Robinet]
* Merge pull request #42 from wllm-rbnt/extensions. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
Add missing extension names
2022-05-26 12:55:02 +00:00
* Add missing extension names. [William Robinet]
* Merge pull request #39 from wllm-rbnt/save2pcap. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
Rework of https://github.com/adulau/ssldump/pull/26 after build system changes
2022-05-26 12:55:02 +00:00
* Mention https://github.com/droe/sslsplit in README.md, fix man page. [William Robinet]
* Add libnet1-dev deps to CI and README.md. [William Robinet]
* Merge remote-tracking branch 'upstream/master' into save2pcap. [William Robinet]
* Merge pull request #38 from wllm-rbnt/warnings. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
Code cleanup
2022-05-26 12:55:02 +00:00
* Add missing Makefile.am. [William Robinet]
* Rework https://github.com/adulau/ssldump/pull/26 after build system changes. [William Robinet]
* Add save decrypted datato pcap. first alpha version. [Aleksey Ryabkov]
* Fix for use of deprecated OpenSSL HMAC functions. [William Robinet]
* Fix for type casting related warnings. [William Robinet]
* Add missing function prototype. [William Robinet]
* Fix for "warning: operator << has lower precedence than -" [William Robinet]
* Remove definitions of unused variables. [William Robinet]
* Fix for "warning: promoted type int of K&R function parameter is not compatible with the parameter type ..." [William Robinet]
* Fix for "warning: using the result of an assignment as a condition without parentheses" [William Robinet]
* Merge pull request #37 from wllm-rbnt/fixes. [Alexandre Dulaunoy]
2021-02-02 14:33:51 +00:00
Fixes
2022-05-26 12:55:02 +00:00
* Link README to README.md. [William Robinet]
* Fix for uninitialized variables and possible overflow. [William Robinet]
* Remove unused RCSSTRING variable globally. [William Robinet]
* Reorganize README files. [William Robinet]
* Add line return after "certificate_types" in output, see the problem in https://github.com/adulau/ssldump/issues/36#issuecomment-702586335. [William Robinet]
## v1.2 (2020-09-22)
### Changes
* [cleanup] file cleanup (tab/ws mixed) [Alexandre Dulaunoy]
* [doc] workflow badge added. [Alexandre Dulaunoy]
* [workflow] config updated. [Alexandre Dulaunoy]
* [workflow] pcap. [Alexandre Dulaunoy]
* [workflow] add required packages. [Alexandre Dulaunoy]
* [doc] clarification about ssldump repository + release v1.1. [Alexandre Dulaunoy]
* [doc] release v1.1 - ChangeLog updated. [Alexandre Dulaunoy]
### Other
* Merge pull request #34 from wllm-rbnt/build-sys. [Alexandre Dulaunoy]
2020-09-22 13:58:37 +00:00
Build system updates
2022-05-26 12:55:02 +00:00
* Fix long line in README.md. [William Robinet]
* Update README.md with ./configure examples. [William Robinet]
* Update README.md with ./configure options. [William Robinet]
* Clean debug functions, remove duplicates. [William Robinet]
* Define DEBUG when using --enable-debug. [William Robinet]
* Add optional features to ./configure (ASAN, debug, optimization) [William Robinet]
* Reenable OpenSSL code compilation. [William Robinet]
* Update .gitignore, rearrange CI workflows variable definition. [William Robinet]
* Remove -g from default CFLAGS and check for Clang explicitly. [William Robinet]
* Remove deprecated define. [William Robinet]
* Reorder checks in configure.ac. [William Robinet]
* Prepare ASAN build. [William Robinet]
* Force use of GCC in GCC CI. [William Robinet]
* Add Clang CI. [William Robinet]
* Merge pull request #35 from mattslot/master. [Alexandre Dulaunoy]
2020-09-22 13:58:37 +00:00
Add renegotiation_info extension
2022-05-26 12:55:02 +00:00
* Add renegotiation_info extension. [Matt Slot]
* Merge pull request #33 from wllm-rbnt/oob-reads. [Alexandre Dulaunoy]
2020-09-22 13:58:37 +00:00
Fix multiple segfaults on out-of-bounds read access
2022-05-26 12:55:02 +00:00
* Fix multiple segfault by OOB read because of wrong format string specifier. [William Robinet]
* Fix segfault by OOB read on malformed packets (2) [William Robinet]
* Fix segfault by OOB read on malformed packets. [William Robinet]
* Merge pull request #31 from wllm-rbnt/autoconf2020. [Alexandre Dulaunoy]
2020-09-22 13:58:37 +00:00
Autoconf2020
2022-05-26 12:55:02 +00:00
* Fix deprecation warning from libcap 1.9.1. [William Robinet]
* Make FreeBSD (12.1) happy. [William Robinet]
* Update CI workflow. [William Robinet]
* Apply Replace-direct-struct-access-patterns-with-OpenSSL-1.1-ge.patch from Debian pkg. [William Robinet]
* Update readme. [William Robinet]
* Fix readme. [William Robinet]
* Improve lib detection and .gitignore. [William Robinet]
* Remove generated file. [William Robinet]
* Add man page to Makefile.am. [William Robinet]
* Fix warning about type of arguments of pcap_handler. [William Robinet]
* Fix warning about signal() arguments type. [William Robinet]
* Fix build warnings for missing prototypes. [William Robinet]
* Add build deps to readme. [William Robinet]
* Fix readme. [William Robinet]
* Autoconf setup rewritten. [William Robinet]
* Set theme jekyll-theme-minimal. [Alexandre Dulaunoy]
* Merge pull request #27 from microolap-technologies/resumed_sessions. [Alexandre Dulaunoy]
2020-09-22 13:58:37 +00:00
add support to decrypt resumed sessions
2022-05-26 12:55:02 +00:00
* Add support to decrypt resumed sessions. [Aleksey Ryabkov]
* First test workflow. [Alexandre Dulaunoy]
* Merge pull request #25 from microolap-technologies/sni_2_srv_name. [Alexandre Dulaunoy]
2020-09-22 13:58:37 +00:00
use sni in server_name
2022-05-26 12:55:02 +00:00
* Use sni in server_name. [Aleksey Ryabkov]
## v1.1 (2019-12-28)
2020-09-22 13:58:37 +00:00
2022-05-26 12:55:02 +00:00
### Changes
2019-12-28 13:35:36 +00:00
2022-05-26 12:55:02 +00:00
* [doc] Changelog reflecting v1.0 release. [Alexandre Dulaunoy]
2019-12-28 13:35:36 +00:00
2022-05-26 12:55:02 +00:00
### Other
* Merge pull request #24 from mattslot/master. [Alexandre Dulaunoy]
2019-12-28 13:35:36 +00:00
Explicit parameter types for static prototypes
2022-05-26 12:55:02 +00:00
* Explicit parameter types for static prototypes. [Matt Slot]
* Merge pull request #22 from EaseTheWorld/handshake. [Alexandre Dulaunoy]
2019-12-28 13:35:36 +00:00
Handle weird 3-way handshake(syn&ack -> syn -> ack)
2022-05-26 12:55:02 +00:00
* Handle weird 3-way handshake(syn&ack -> syn -> ack) I have pcaps from Cisco2960 span port and found some tcp handshake has weird order 3-way handshake. It seems first packet order between sessions is not guaranted for cisco span. maybe. Current state transition is INIT -- syn --> SYN1 -- syn&ack --> SYN2 -- ack --> ESTABLISHED New state transition starts with SYN1 or SYN2 and adds(revive actually) STATE_ACK to handle both cases. case1 : INIT -- syn --> SYN1 -- syn&ack -->ACK -- ack --> ESTABLISHED (normal) case2 : INIT -- syn&ack --> SYN2 -- syn -->ACK -- ack --> ESTABLISHED (weird) [EaseTheWorld]
## v1.0 (2019-05-26)
### Changes
* [build] v1.0 released. [Alexandre Dulaunoy]
* [changelog] v1.0 released. [Alexandre Dulaunoy]
* [build] gitchangelogrc configuration added. [Alexandre Dulaunoy]
### Other
* Merge pull request #21 from qha/repair-make-targets. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Repair make targets and ssl/ssldecode.c, bump version
2022-05-26 12:55:02 +00:00
* Rerun autoconf. [Ulrik Haugen]
* Bump version. [Ulrik Haugen]
* Repair ssl_key_log_file handling. [Ulrik Haugen]
2019-05-26 06:11:07 +00:00
Set ssl_key_log_file to null in ssl_decode_ctx_create if no
file name was supplied.
Only seek ssl_key_log_file in ssl_read_key_log_file if it
is non null.
Repair order of fseek parameters.
2022-05-26 12:55:02 +00:00
* Take project name and version from configure define. [Ulrik Haugen]
2019-05-26 06:11:07 +00:00
... in print_version.
2022-05-26 12:55:02 +00:00
* Enable compiling without std c99 when OPENSSL is defined. [Ulrik Haugen]
* Repair spelling in comments. [Ulrik Haugen]
* Remove presumably extraneous files. [Ulrik Haugen]
* Remove extraneous files. [Ulrik Haugen]
* Add .gitignore. [Ulrik Haugen]
* Make install target install doc files. [Ulrik Haugen]
* Repair installdir variable names. [Ulrik Haugen]
* Repair dist target. [Ulrik Haugen]
2019-05-26 06:11:07 +00:00
Mark phony targets as such.
Cease use of unobtainable version-check.pl.
Take version from configure substituted variable.
Adjust dist archive location.
Prune more backup files.
2022-05-26 12:55:02 +00:00
* Whitespace. [Ulrik Haugen]
* Set package name in configure.in, move version there. [Ulrik Haugen]
* Merge pull request #19 from 1div0/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
GREASE
2022-05-26 12:55:02 +00:00
* GREASE. [Peter Kovář]
* Merge pull request #18 from mathewmarcus/dh_aes_gcm_support. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Dh aes gcm support
2022-05-26 12:55:02 +00:00
* Use macro to check if cipher is AEAD. [mathewmarcus]
* Update man page with -l sslkeylogfile option. [mathewmarcus]
* Updated relevant ciphersuites with GCM enc. [mathewmarcus]
* Added fix for AES256 GCM decryption. [mathewmarcus]
* Added case insensitive string comparison macro. [mathewmarcus]
* Added support for AES GCM decryption. [mathewmarcus]
* Use sslkeylogfile to get MS if possible. [mathewmarcus]
* Added function to extract MS from sslkeylogfile. [mathewmarcus]
* Added GCM specific ciphersuite info. [mathewmarcus]
* Added sslkeylogfile pointer to decode ctx. [mathewmarcus]
* Fix decoding and printing of DiffieHellman Client params. [mathewmarcus]
* Add l option for SSLKEYLOGFILE. [mathewmarcus]
* Merge pull request #17 from mathewmarcus/fix_extension_bug. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
correctly handle case where server hello does not request extension s…
2022-05-26 12:55:02 +00:00
* Improve syntax. [mathewmarcus]
* Correctly handle case where server hello does not request extension specified by client. [mathewmarcus]
* Merge pull request #16 from mathewmarcus/tls_extensions. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Tls extensions
2022-05-26 12:55:02 +00:00
* Code cleanup. [mathewmarcus]
* Added support for SNI. [mathewmarcus]
* Added support for encrypt-then-mac. [mathewmarcus]
* Finished support for extended master secret. [mathewmarcus]
* Calculate session hash. [mathewmarcus]
* Added struct to store extensions. [mathewmarcus]
* Added struct to store extensions. [mathewmarcus]
* Revert "moved struct ssl_decoder_ definition into header file because we need it in ssl.enums.c" [Mathew Marcus]
2019-05-26 06:11:07 +00:00
This reverts commit 193c6001086920c0623593aba373f948aa275f8d.
2022-05-26 12:55:02 +00:00
* Moved struct ssl_decoder_ definition into header file because we need it in ssl.enums.c. [mathewmarcus]
* Added handler for extended master secret extension. [mathewmarcus]
* Rename functions. [mathewmarcus]
* Record handshake messages for session hash. [Mathew Marcus]
* Include extensions in output. [mathewmarcus]
* Merge pull request #15 from Whissi/update-ciphers. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Update ciphers
2022-05-26 12:55:02 +00:00
* Adjust cipher suite formation. [Thomas Deutschmann]
* Add TLS 1.3 cipher suites. [Thomas Deutschmann]
* Add fallback signaling cipher suite. [Thomas Deutschmann]
* Add CHACHA20_POLY1305 cipher suite. [Thomas Deutschmann]
* Merge pull request #14 from davidkretch/fix-typo. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Fix a typo in the man page
2022-05-26 12:55:02 +00:00
* Fix a typo in the man page. [David Kretch]
2019-05-26 06:11:07 +00:00
Delete the extra "to" in "To decrypt traffic to to host" under the examples section.
2022-05-26 12:55:02 +00:00
* Merge pull request #13 from alperakcan/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
fix ssl record queue data read
2022-05-26 12:55:02 +00:00
* - fix mis calculation of read_left if queue already has some data, which might not be bigger than ssl_header_size - update q->ptr only if q->data is changed. [Alper Akcan]
* Merge pull request #1 from adulau/master. [Alper Akcan]
2019-05-26 06:11:07 +00:00
Merge pull request #12 from alperakcan/master
2022-05-26 12:55:02 +00:00
* Merge pull request #12 from alperakcan/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Fix packet length calculation if IP length is 0, due to TSO
2022-05-26 12:55:02 +00:00
* Fix packet length calculation if IP length is 0, due to TSO. [Alper Akcan]
* Typo fixed. [Alexandre Dulaunoy]
* Explanation added in a new README. [Alexandre Dulaunoy]
* Merge pull request #9 from PequalsNP-team/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
updated configure for new libpcap location on most linux distro
2022-05-26 12:55:02 +00:00
* Updated configure for new libpcap location on most linux distro. [thez3ro]
* Merge pull request #7 from knowtoto/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Fix a null pointer dereference bug
2022-05-26 12:55:02 +00:00
* Fix a null pointer dereference bug of tls12_prf be caused by invalid extern declaration for digests variable. [hyunkyu.oh]
* Merge pull request #5 from wllm-rbnt/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
More code cleaning
2022-05-26 12:55:02 +00:00
* Include string.h (remove warnings about memcpy) [William Robinet]
* Fix order of arguments in calls to calloc. [William Robinet]
* "Each invocation of va_start() must be matched by a corresponding invocation of va_end()" [William Robinet]
* Remove dead code. [William Robinet]
* Do not use uninitialized variable. [William Robinet]
* Make valgrind/memcheck happy. [William Robinet]
* Add missing comma (introduced by 2d067c26503ace1466d132e7efd9f0ff7885295a) [William Robinet]
* Merge pull request #4 from wllm-rbnt/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Fix cleanup loop
2022-05-26 12:55:02 +00:00
* Avoid auto-vivisection during connection clean-up ... [William Robinet]
* Fix inactive connection removal. [William Robinet]
* Merge pull request #3 from wllm-rbnt/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
[bugfix] Initialize initial reference timeval
2022-05-26 12:55:02 +00:00
* Initialize initial reference timeval Avoids wrong cleaning of first connection(s) [William Robinet]
* Merge pull request #2 from wllm-rbnt/master. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Fixes for 2 memory leaks and in flight structure cleaning
2022-05-26 12:55:02 +00:00
* Fix memory leak if SSL session id is not present. [William Robinet]
* In flight connection pool cleaning. [William Robinet]
* Fix memory leak at connection closing. [William Robinet]
* Merge pull request #1 from wllm-rbnt/csloop. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
Fix for infinite loop in Ciphers Suite decoding
2022-05-26 12:55:02 +00:00
* Fix for infinite loop in Ciphers Suite decoding. [William Robinet]
* Dtable bug fixed: list overrun (from NetBSD tree) [Alexandre Dulaunoy]
* Memory leak per TLS session removed. Call cleanup after each finalization. [Alexandre Dulaunoy]
* Free also the packet structure. [Alexandre Dulaunoy]
* Snaplen increased to the default jumbo frame size. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
If the snaplen is lower than the total frame length announced,
ssldump won't be able to reassemble the payload. "Length mismatch"
error. Tested on Ethernet uplinks supporting jumbo frame.
2022-05-26 12:55:02 +00:00
* Continue even if no IP address is assigned on the interface. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
ssldump in a production environment can be used on a capture
interface where no IP addresses are assigned. Print a warning instead
of exiting.
2022-05-26 12:55:02 +00:00
* Modern config.guess/sub from Ubuntu ssldump package. [Alexandre Dulaunoy]
* Ssldump-0.9-ciphersuites.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-ssl-enums.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-tlsv12.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-pcap-vlan.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-link_layer.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-table-stops.patch. [Alexandre Dulaunoy]
* Sldump-0.9-cvs-20060619.patch. [Alexandre Dulaunoy]
* Sldump-0.9-aes.patch. [Alexandre Dulaunoy]
* Sldump-0.9-libpcap.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-openssl.patch. [Alexandre Dulaunoy]
* Ssldump_0.9b3.orig.tar.gz Import. [Alexandre Dulaunoy]
2019-05-26 06:11:07 +00:00
