adulau/ssldump
1
0
Fork 0
mirror of https://github.com/adulau/ssldump.git synced 2024-11-22 01:17:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

chg: [doc] ChangeLog updated with release v1.5

Browse source
This commit is contained in:
Alexandre Dulaunoy 2022-05-26 14:55:02 +02:00
parent 36fd5b72c3
commit aa4e43c321
Signed by: adulau
GPG key ID: 09E2CD4944E6CBCD
1 changed files with 531 additions and 339 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

870
ChangeLog
View file

@ -1,282 +1,399 @@
Changelog # Changelog
=========
v1.4 (2021-04-13) ## v1.5 (2022-05-26)
-----------------
Changes ### Changes
~~~~~~~
- [doc] v1.4 released. [Alexandre Dulaunoy]
- [doc] v1.4 released. [Alexandre Dulaunoy]
- [doc] cleanup README. [Alexandre Dulaunoy]
- [doc] v1.3 released. [Alexandre Dulaunoy]
Other * [doc] An example use-case of JA3. [Alexandre Dulaunoy]
~~~~~
- Merge pull request #54 from wllm-rbnt/dev. [Alexandre Dulaunoy] * [doc] Changelog updated. [Alexandre Dulaunoy]
### Other
* Merge pull request #60 from lord8266/max. [Alexandre Dulaunoy]
Add parentheses around MAX and MIN
* Add parentheses around MAX and MIN. [Vishwa Pravin]
* Merge pull request #58 from wllm-rbnt/dev. [Alexandre Dulaunoy]
Add support for pcap output to FIFO
* Add support for pcap output to FIFO. [William Robinet]
## v1.4 (2021-04-13)
### Changes
* [doc] v1.4 released. [Alexandre Dulaunoy]
* [doc] v1.4 released. [Alexandre Dulaunoy]
* [doc] cleanup README. [Alexandre Dulaunoy]
* [doc] v1.3 released. [Alexandre Dulaunoy]
### Other
* Merge pull request #54 from wllm-rbnt/dev. [Alexandre Dulaunoy]
Fix release version Fix release version
- Fix release version. [William Robinet]
- Merge pull request #53 from wllm-rbnt/dev. [Alexandre Dulaunoy] * Fix release version. [William Robinet]
* Merge pull request #53 from wllm-rbnt/dev. [Alexandre Dulaunoy]
Add support for IPv6 traffic dump Add support for IPv6 traffic dump
- Add support for IPv6 traffic dump. [William Robinet]
- Merge pull request #51 from wllm-rbnt/dev. [Alexandre Dulaunoy] * Add support for IPv6 traffic dump. [William Robinet]
* Merge pull request #51 from wllm-rbnt/dev. [Alexandre Dulaunoy]
dev 1.4 beta dev 1.4 beta
- Fix ja3(s) length of strings used in MD5 computation + update MD5
functions. [William Robinet] * Fix ja3(s) length of strings used in MD5 computation + update MD5 functions. [William Robinet]
- Extract traffic mirroring commands from docker run scripts. [William
Robinet] * Extract traffic mirroring commands from docker run scripts. [William Robinet]
- Add support for ja3 & ja3s. [William Robinet]
- Fix snprintf warning. [William Robinet] * Add support for ja3 & ja3s. [William Robinet]
- Fix file ownership in Dockerfiles. [William Robinet]
- Docker files initial import. [William Robinet] * Fix snprintf warning. [William Robinet]
- Bump version to 1.4b. [William Robinet]
* Fix file ownership in Dockerfiles. [William Robinet]
* Docker files initial import. [William Robinet]
* Bump version to 1.4b. [William Robinet]
v1.3 (2021-02-02) ## v1.3 (2021-02-02)
-----------------
Changes ### Changes
~~~~~~~
- [doc] prepare for release v1.3. [Alexandre Dulaunoy] * [doc] prepare for release v1.3. [Alexandre Dulaunoy]
- [copyright] added additional copyright for all new contribution.
[Alexandre Dulaunoy] * [copyright] added additional copyright for all new contribution. [Alexandre Dulaunoy]
ssldump is collectively owned by all the contributors. There is no ssldump is collectively owned by all the contributors. There is no
change to the original license. change to the original license.
- [doc] man page fixed for copyright notice + README updated. [Alexandre
Dulaunoy]
- [doc] William has a real name. [Alexandre Dulaunoy]
- [credits] updated. [Alexandre Dulaunoy]
- [doc] v1.2 released. [Alexandre Dulaunoy]
- [doc] v1.2 released. [Alexandre Dulaunoy]
Other * [doc] man page fixed for copyright notice + README updated. [Alexandre Dulaunoy]
~~~~~
- Merge pull request #49 from wllm-rbnt/leaks. [Alexandre Dulaunoy] * [doc] William has a real name. [Alexandre Dulaunoy]
* [credits] updated. [Alexandre Dulaunoy]
* [doc] v1.2 released. [Alexandre Dulaunoy]
* [doc] v1.2 released. [Alexandre Dulaunoy]
### Other
* Merge pull request #49 from wllm-rbnt/leaks. [Alexandre Dulaunoy]
Adjust copyright info Adjust copyright info
- Adjust copyright info. [William Robinet]
- Merge branch 'wllm-rbnt-leaks' [Alexandre Dulaunoy] * Adjust copyright info. [William Robinet]
- Fix bug introduced in 64effa3bb93c3a219fb0afd868c5bc2609093ced.
[William Robinet] * Merge branch 'wllm-rbnt-leaks' [Alexandre Dulaunoy]
- Merge remote-tracking branch 'upstream/master' into leaks. [William
Robinet] * Fix bug introduced in 64effa3bb93c3a219fb0afd868c5bc2609093ced. [William Robinet]
- Merge pull request #46 from wllm-rbnt/leaks. [Alexandre Dulaunoy]
* Merge remote-tracking branch 'upstream/master' into leaks. [William Robinet]
* Merge pull request #46 from wllm-rbnt/leaks. [Alexandre Dulaunoy]
Leaks Leaks
- Avoid leak in TCP segment reassembly code. [William Robinet]
- Clean remaining json object in case of error. [William Robinet] * Avoid leak in TCP segment reassembly code. [William Robinet]
- Abort properly on decode error. [William Robinet]
- Avoid client session_id related leak. [William Robinet] * Clean remaining json object in case of error. [William Robinet]
- Avoid server_random related leak. [William Robinet]
- Avoid client_random related leak. [William Robinet] * Abort properly on decode error. [William Robinet]
- Check ssl_decode_enum() return code correctly. [William Robinet]
- Exit process_tcp_packet() in case TCP header is incomplete. [William * Avoid client session_id related leak. [William Robinet]
Robinet]
- Check timestamp_diff return code correctly. [William Robinet] * Avoid server_random related leak. [William Robinet]
- Cleanup before exit on error. [William Robinet]
- Fix for crash if length of captured frame is less than Ethernet header * Avoid client_random related leak. [William Robinet]
size. [William Robinet]
- Check packet size before looking at IP header. [William Robinet] * Check ssl_decode_enum() return code correctly. [William Robinet]
- Check return code after string extraction. [William Robinet]
- Limit length during server name decoding. [William Robinet] * Exit process_tcp_packet() in case TCP header is incomplete. [William Robinet]
- Bump version to 1.3 in configure.ac. [William Robinet]
- Decode ClientHello v2 properly. [William Robinet] * Check timestamp_diff return code correctly. [William Robinet]
- Output error to stderr. [William Robinet]
- Add proper return value. [William Robinet] * Cleanup before exit on error. [William Robinet]
- Avoid leak by freeing SSL decoding context properly. [William Robinet]
- Close everything properly in case of SIGINT. [William Robinet] * Fix for crash if length of captured frame is less than Ethernet header size. [William Robinet]
- Fix leak in associative array implementation. [William Robinet]
- Merge branch 'wllm-rbnt-json' [Alexandre Dulaunoy] * Check packet size before looking at IP header. [William Robinet]
- Avoid some memory leaks. [William Robinet]
- Fix time struct related warning (2) [William Robinet] * Check return code after string extraction. [William Robinet]
- Fix time struct related warning. [William Robinet]
- Add checks for libjson-c to configure.ac. [William Robinet] * Limit length during server name decoding. [William Robinet]
- Update CI workflow descriptions (2) [William Robinet]
- Update CI workflow descriptions. [William Robinet] * Bump version to 1.3 in configure.ac. [William Robinet]
- First import of the JSON output code
(https://github.com/adulau/ssldump/issues/41) [William Robinet] * Decode ClientHello v2 properly. [William Robinet]
- Do not print information message when no connection is cleaned at
shutdown. [William Robinet] * Output error to stderr. [William Robinet]
- Fix memory leak in ssl_process_server_session_id() [William Robinet]
- Close global pcap struct properly in case of SIGINT. [William Robinet] * Add proper return value. [William Robinet]
- Change binary installation directory to /usr/sbin. [William Robinet]
- Move unused files away. [William Robinet] * Avoid leak by freeing SSL decoding context properly. [William Robinet]
- Fix README.md - wrong package name for rpm based distros. [William
Robinet] * Close everything properly in case of SIGINT. [William Robinet]
- Merge pull request #42 from wllm-rbnt/extensions. [Alexandre Dulaunoy]
* Fix leak in associative array implementation. [William Robinet]
* Merge branch 'wllm-rbnt-json' [Alexandre Dulaunoy]
* Avoid some memory leaks. [William Robinet]
* Fix time struct related warning (2) [William Robinet]
* Fix time struct related warning. [William Robinet]
* Add checks for libjson-c to configure.ac. [William Robinet]
* Update CI workflow descriptions (2) [William Robinet]
* Update CI workflow descriptions. [William Robinet]
* First import of the JSON output code (https://github.com/adulau/ssldump/issues/41) [William Robinet]
* Do not print information message when no connection is cleaned at shutdown. [William Robinet]
* Fix memory leak in ssl_process_server_session_id() [William Robinet]
* Close global pcap struct properly in case of SIGINT. [William Robinet]
* Change binary installation directory to /usr/sbin. [William Robinet]
* Move unused files away. [William Robinet]
* Fix README.md - wrong package name for rpm based distros. [William Robinet]
* Merge pull request #42 from wllm-rbnt/extensions. [Alexandre Dulaunoy]
Add missing extension names Add missing extension names
- Add missing extension names. [William Robinet]
- Merge pull request #39 from wllm-rbnt/save2pcap. [Alexandre Dulaunoy] * Add missing extension names. [William Robinet]
* Merge pull request #39 from wllm-rbnt/save2pcap. [Alexandre Dulaunoy]
Rework of https://github.com/adulau/ssldump/pull/26 after build system changes Rework of https://github.com/adulau/ssldump/pull/26 after build system changes
- Mention https://github.com/droe/sslsplit in README.md, fix man page.
[William Robinet] * Mention https://github.com/droe/sslsplit in README.md, fix man page. [William Robinet]
- Add libnet1-dev deps to CI and README.md. [William Robinet]
- Merge remote-tracking branch 'upstream/master' into save2pcap. * Add libnet1-dev deps to CI and README.md. [William Robinet]
[William Robinet]
- Merge pull request #38 from wllm-rbnt/warnings. [Alexandre Dulaunoy] * Merge remote-tracking branch 'upstream/master' into save2pcap. [William Robinet]
* Merge pull request #38 from wllm-rbnt/warnings. [Alexandre Dulaunoy]
Code cleanup Code cleanup
- Add missing Makefile.am. [William Robinet]
- Rework https://github.com/adulau/ssldump/pull/26 after build system * Add missing Makefile.am. [William Robinet]
changes. [William Robinet]
- Add save decrypted datato pcap. first alpha version. [Aleksey Ryabkov] * Rework https://github.com/adulau/ssldump/pull/26 after build system changes. [William Robinet]
- Fix for use of deprecated OpenSSL HMAC functions. [William Robinet]
- Fix for type casting related warnings. [William Robinet] * Add save decrypted datato pcap. first alpha version. [Aleksey Ryabkov]
- Add missing function prototype. [William Robinet]
- Fix for "warning: operator << has lower precedence than -" [William * Fix for use of deprecated OpenSSL HMAC functions. [William Robinet]
Robinet]
- Remove definitions of unused variables. [William Robinet] * Fix for type casting related warnings. [William Robinet]
- Fix for "warning: promoted type int of K&R function parameter is not
compatible with the parameter type ..." [William Robinet] * Add missing function prototype. [William Robinet]
- Fix for "warning: using the result of an assignment as a condition
without parentheses" [William Robinet] * Fix for "warning: operator << has lower precedence than -" [William Robinet]
- Merge pull request #37 from wllm-rbnt/fixes. [Alexandre Dulaunoy]
* Remove definitions of unused variables. [William Robinet]
* Fix for "warning: promoted type int of K&R function parameter is not compatible with the parameter type ..." [William Robinet]
* Fix for "warning: using the result of an assignment as a condition without parentheses" [William Robinet]
* Merge pull request #37 from wllm-rbnt/fixes. [Alexandre Dulaunoy]
Fixes Fixes
- Link README to README.md. [William Robinet]
- Fix for uninitialized variables and possible overflow. [William * Link README to README.md. [William Robinet]
Robinet]
- Remove unused RCSSTRING variable globally. [William Robinet] * Fix for uninitialized variables and possible overflow. [William Robinet]
- Reorganize README files. [William Robinet]
- Add line return after "certificate_types" in output, see the problem * Remove unused RCSSTRING variable globally. [William Robinet]
in https://github.com/adulau/ssldump/issues/36#issuecomment-702586335.
[William Robinet] * Reorganize README files. [William Robinet]
* Add line return after "certificate_types" in output, see the problem in https://github.com/adulau/ssldump/issues/36#issuecomment-702586335. [William Robinet]
v1.2 (2020-09-22) ## v1.2 (2020-09-22)
-----------------
Changes ### Changes
~~~~~~~
- [cleanup] file cleanup (tab/ws mixed) [Alexandre Dulaunoy]
- [doc] workflow badge added. [Alexandre Dulaunoy]
- [workflow] config updated. [Alexandre Dulaunoy]
- [workflow] pcap. [Alexandre Dulaunoy]
- [workflow] add required packages. [Alexandre Dulaunoy]
- [doc] clarification about ssldump repository + release v1.1.
[Alexandre Dulaunoy]
- [doc] release v1.1 - ChangeLog updated. [Alexandre Dulaunoy]
Other * [cleanup] file cleanup (tab/ws mixed) [Alexandre Dulaunoy]
~~~~~
- Merge pull request #34 from wllm-rbnt/build-sys. [Alexandre Dulaunoy] * [doc] workflow badge added. [Alexandre Dulaunoy]
* [workflow] config updated. [Alexandre Dulaunoy]
* [workflow] pcap. [Alexandre Dulaunoy]
* [workflow] add required packages. [Alexandre Dulaunoy]
* [doc] clarification about ssldump repository + release v1.1. [Alexandre Dulaunoy]
* [doc] release v1.1 - ChangeLog updated. [Alexandre Dulaunoy]
### Other
* Merge pull request #34 from wllm-rbnt/build-sys. [Alexandre Dulaunoy]
Build system updates Build system updates
- Fix long line in README.md. [William Robinet]
- Update README.md with ./configure examples. [William Robinet] * Fix long line in README.md. [William Robinet]
- Update README.md with ./configure options. [William Robinet]
- Clean debug functions, remove duplicates. [William Robinet] * Update README.md with ./configure examples. [William Robinet]
- Define DEBUG when using --enable-debug. [William Robinet]
- Add optional features to ./configure (ASAN, debug, optimization) * Update README.md with ./configure options. [William Robinet]
[William Robinet]
- Reenable OpenSSL code compilation. [William Robinet] * Clean debug functions, remove duplicates. [William Robinet]
- Update .gitignore, rearrange CI workflows variable definition.
[William Robinet] * Define DEBUG when using --enable-debug. [William Robinet]
- Remove -g from default CFLAGS and check for Clang explicitly. [William
Robinet] * Add optional features to ./configure (ASAN, debug, optimization) [William Robinet]
- Remove deprecated define. [William Robinet]
- Reorder checks in configure.ac. [William Robinet] * Reenable OpenSSL code compilation. [William Robinet]
- Prepare ASAN build. [William Robinet]
- Force use of GCC in GCC CI. [William Robinet] * Update .gitignore, rearrange CI workflows variable definition. [William Robinet]
- Add Clang CI. [William Robinet]
- Merge pull request #35 from mattslot/master. [Alexandre Dulaunoy] * Remove -g from default CFLAGS and check for Clang explicitly. [William Robinet]
* Remove deprecated define. [William Robinet]
* Reorder checks in configure.ac. [William Robinet]
* Prepare ASAN build. [William Robinet]
* Force use of GCC in GCC CI. [William Robinet]
* Add Clang CI. [William Robinet]
* Merge pull request #35 from mattslot/master. [Alexandre Dulaunoy]
Add renegotiation_info extension Add renegotiation_info extension
- Add renegotiation_info extension. [Matt Slot]
- Merge pull request #33 from wllm-rbnt/oob-reads. [Alexandre Dulaunoy] * Add renegotiation_info extension. [Matt Slot]
* Merge pull request #33 from wllm-rbnt/oob-reads. [Alexandre Dulaunoy]
Fix multiple segfaults on out-of-bounds read access Fix multiple segfaults on out-of-bounds read access
- Fix multiple segfault by OOB read because of wrong format string
specifier. [William Robinet] * Fix multiple segfault by OOB read because of wrong format string specifier. [William Robinet]
- Fix segfault by OOB read on malformed packets (2) [William Robinet]
- Fix segfault by OOB read on malformed packets. [William Robinet] * Fix segfault by OOB read on malformed packets (2) [William Robinet]
- Merge pull request #31 from wllm-rbnt/autoconf2020. [Alexandre
Dulaunoy] * Fix segfault by OOB read on malformed packets. [William Robinet]
* Merge pull request #31 from wllm-rbnt/autoconf2020. [Alexandre Dulaunoy]
Autoconf2020 Autoconf2020
- Fix deprecation warning from libcap 1.9.1. [William Robinet]
- Make FreeBSD (12.1) happy. [William Robinet] * Fix deprecation warning from libcap 1.9.1. [William Robinet]
- Update CI workflow. [William Robinet]
- Apply Replace-direct-struct-access-patterns-with-OpenSSL-1.1-ge.patch * Make FreeBSD (12.1) happy. [William Robinet]
from Debian pkg. [William Robinet]
- Update readme. [William Robinet] * Update CI workflow. [William Robinet]
- Fix readme. [William Robinet]
- Improve lib detection and .gitignore. [William Robinet] * Apply Replace-direct-struct-access-patterns-with-OpenSSL-1.1-ge.patch from Debian pkg. [William Robinet]
- Remove generated file. [William Robinet]
- Add man page to Makefile.am. [William Robinet] * Update readme. [William Robinet]
- Fix warning about type of arguments of pcap_handler. [William Robinet]
- Fix warning about signal() arguments type. [William Robinet] * Fix readme. [William Robinet]
- Fix build warnings for missing prototypes. [William Robinet]
- Add build deps to readme. [William Robinet] * Improve lib detection and .gitignore. [William Robinet]
- Fix readme. [William Robinet]
- Autoconf setup rewritten. [William Robinet] * Remove generated file. [William Robinet]
- Set theme jekyll-theme-minimal. [Alexandre Dulaunoy]
- Merge pull request #27 from microolap-technologies/resumed_sessions. * Add man page to Makefile.am. [William Robinet]
[Alexandre Dulaunoy]
* Fix warning about type of arguments of pcap_handler. [William Robinet]
* Fix warning about signal() arguments type. [William Robinet]
* Fix build warnings for missing prototypes. [William Robinet]
* Add build deps to readme. [William Robinet]
* Fix readme. [William Robinet]
* Autoconf setup rewritten. [William Robinet]
* Set theme jekyll-theme-minimal. [Alexandre Dulaunoy]
* Merge pull request #27 from microolap-technologies/resumed_sessions. [Alexandre Dulaunoy]
add support to decrypt resumed sessions add support to decrypt resumed sessions
- Add support to decrypt resumed sessions. [Aleksey Ryabkov]
- First test workflow. [Alexandre Dulaunoy] * Add support to decrypt resumed sessions. [Aleksey Ryabkov]
- Merge pull request #25 from microolap-technologies/sni_2_srv_name.
[Alexandre Dulaunoy] * First test workflow. [Alexandre Dulaunoy]
* Merge pull request #25 from microolap-technologies/sni_2_srv_name. [Alexandre Dulaunoy]
use sni in server_name use sni in server_name
- Use sni in server_name. [Aleksey Ryabkov]
* Use sni in server_name. [Aleksey Ryabkov]
v1.1 (2019-12-28) ## v1.1 (2019-12-28)
-----------------
Changes ### Changes
~~~~~~~
- [doc] Changelog reflecting v1.0 release. [Alexandre Dulaunoy]
Other * [doc] Changelog reflecting v1.0 release. [Alexandre Dulaunoy]
~~~~~
- Merge pull request #24 from mattslot/master. [Alexandre Dulaunoy] ### Other
* Merge pull request #24 from mattslot/master. [Alexandre Dulaunoy]
Explicit parameter types for static prototypes Explicit parameter types for static prototypes
- Explicit parameter types for static prototypes. [Matt Slot]
- Merge pull request #22 from EaseTheWorld/handshake. [Alexandre * Explicit parameter types for static prototypes. [Matt Slot]
Dulaunoy]
* Merge pull request #22 from EaseTheWorld/handshake. [Alexandre Dulaunoy]
Handle weird 3-way handshake(syn&ack -> syn -> ack) Handle weird 3-way handshake(syn&ack -> syn -> ack)
- Handle weird 3-way handshake(syn&ack -> syn -> ack) I have pcaps from
Cisco2960 span port and found some tcp handshake has weird order 3-way * Handle weird 3-way handshake(syn&ack -> syn -> ack) I have pcaps from Cisco2960 span port and found some tcp handshake has weird order 3-way handshake. It seems first packet order between sessions is not guaranted for cisco span. maybe. Current state transition is INIT -- syn --> SYN1 -- syn&ack --> SYN2 -- ack --> ESTABLISHED New state transition starts with SYN1 or SYN2 and adds(revive actually) STATE_ACK to handle both cases. case1 : INIT -- syn --> SYN1 -- syn&ack -->ACK -- ack --> ESTABLISHED (normal) case2 : INIT -- syn&ack --> SYN2 -- syn -->ACK -- ack --> ESTABLISHED (weird) [EaseTheWorld]
handshake. It seems first packet order between sessions is not
guaranted for cisco span. maybe. Current state transition is
INIT -- syn --> SYN1 -- syn&ack --> SYN2 -- ack --> ESTABLISHED New
state transition starts with SYN1 or SYN2 and adds(revive actually)
STATE_ACK to handle both cases. case1 : INIT -- syn --> SYN1 --
syn&ack -->ACK -- ack --> ESTABLISHED (normal) case2 : INIT -- syn&ack
--> SYN2 -- syn -->ACK -- ack --> ESTABLISHED (weird) [EaseTheWorld]
v1.0 (2019-05-26) ## v1.0 (2019-05-26)
-----------------
Changes ### Changes
~~~~~~~
- [build] v1.0 released. [Alexandre Dulaunoy]
- [changelog] v1.0 released. [Alexandre Dulaunoy]
- [build] gitchangelogrc configuration added. [Alexandre Dulaunoy]
Other * [build] v1.0 released. [Alexandre Dulaunoy]
~~~~~
- Merge pull request #21 from qha/repair-make-targets. [Alexandre * [changelog] v1.0 released. [Alexandre Dulaunoy]
Dulaunoy]
* [build] gitchangelogrc configuration added. [Alexandre Dulaunoy]
### Other
* Merge pull request #21 from qha/repair-make-targets. [Alexandre Dulaunoy]
Repair make targets and ssl/ssldecode.c, bump version Repair make targets and ssl/ssldecode.c, bump version
- Rerun autoconf. [Ulrik Haugen]
- Bump version. [Ulrik Haugen] * Rerun autoconf. [Ulrik Haugen]
- Repair ssl_key_log_file handling. [Ulrik Haugen]
* Bump version. [Ulrik Haugen]
* Repair ssl_key_log_file handling. [Ulrik Haugen]
Set ssl_key_log_file to null in ssl_decode_ctx_create if no Set ssl_key_log_file to null in ssl_decode_ctx_create if no
file name was supplied. file name was supplied.
@ -285,18 +402,26 @@ Other
is non null. is non null.
Repair order of fseek parameters. Repair order of fseek parameters.
- Take project name and version from configure define. [Ulrik Haugen]
* Take project name and version from configure define. [Ulrik Haugen]
... in print_version. ... in print_version.
- Enable compiling without std c99 when OPENSSL is defined. [Ulrik
Haugen] * Enable compiling without std c99 when OPENSSL is defined. [Ulrik Haugen]
- Repair spelling in comments. [Ulrik Haugen]
- Remove presumably extraneous files. [Ulrik Haugen] * Repair spelling in comments. [Ulrik Haugen]
- Remove extraneous files. [Ulrik Haugen]
- Add .gitignore. [Ulrik Haugen] * Remove presumably extraneous files. [Ulrik Haugen]
- Make install target install doc files. [Ulrik Haugen]
- Repair installdir variable names. [Ulrik Haugen] * Remove extraneous files. [Ulrik Haugen]
- Repair dist target. [Ulrik Haugen]
* Add .gitignore. [Ulrik Haugen]
* Make install target install doc files. [Ulrik Haugen]
* Repair installdir variable names. [Ulrik Haugen]
* Repair dist target. [Ulrik Haugen]
Mark phony targets as such. Mark phony targets as such.
@ -307,158 +432,225 @@ Other
Adjust dist archive location. Adjust dist archive location.
Prune more backup files. Prune more backup files.
- Whitespace. [Ulrik Haugen]
- Set package name in configure.in, move version there. [Ulrik Haugen] * Whitespace. [Ulrik Haugen]
- Merge pull request #19 from 1div0/master. [Alexandre Dulaunoy]
* Set package name in configure.in, move version there. [Ulrik Haugen]
* Merge pull request #19 from 1div0/master. [Alexandre Dulaunoy]
GREASE GREASE
- GREASE. [Peter Kovář]
- Merge pull request #18 from mathewmarcus/dh_aes_gcm_support. * GREASE. [Peter Kovář]
[Alexandre Dulaunoy]
* Merge pull request #18 from mathewmarcus/dh_aes_gcm_support. [Alexandre Dulaunoy]
Dh aes gcm support Dh aes gcm support
- Use macro to check if cipher is AEAD. [mathewmarcus]
- Update man page with -l sslkeylogfile option. [mathewmarcus] * Use macro to check if cipher is AEAD. [mathewmarcus]
- Updated relevant ciphersuites with GCM enc. [mathewmarcus]
- Added fix for AES256 GCM decryption. [mathewmarcus] * Update man page with -l sslkeylogfile option. [mathewmarcus]
- Added case insensitive string comparison macro. [mathewmarcus]
- Added support for AES GCM decryption. [mathewmarcus] * Updated relevant ciphersuites with GCM enc. [mathewmarcus]
- Use sslkeylogfile to get MS if possible. [mathewmarcus]
- Added function to extract MS from sslkeylogfile. [mathewmarcus] * Added fix for AES256 GCM decryption. [mathewmarcus]
- Added GCM specific ciphersuite info. [mathewmarcus]
- Added sslkeylogfile pointer to decode ctx. [mathewmarcus] * Added case insensitive string comparison macro. [mathewmarcus]
- Fix decoding and printing of DiffieHellman Client params.
[mathewmarcus] * Added support for AES GCM decryption. [mathewmarcus]
- Add l option for SSLKEYLOGFILE. [mathewmarcus]
- Merge pull request #17 from mathewmarcus/fix_extension_bug. [Alexandre * Use sslkeylogfile to get MS if possible. [mathewmarcus]
Dulaunoy]
* Added function to extract MS from sslkeylogfile. [mathewmarcus]
* Added GCM specific ciphersuite info. [mathewmarcus]
* Added sslkeylogfile pointer to decode ctx. [mathewmarcus]
* Fix decoding and printing of DiffieHellman Client params. [mathewmarcus]
* Add l option for SSLKEYLOGFILE. [mathewmarcus]
* Merge pull request #17 from mathewmarcus/fix_extension_bug. [Alexandre Dulaunoy]
correctly handle case where server hello does not request extension s… correctly handle case where server hello does not request extension s…
- Improve syntax. [mathewmarcus]
- Correctly handle case where server hello does not request extension * Improve syntax. [mathewmarcus]
specified by client. [mathewmarcus]
- Merge pull request #16 from mathewmarcus/tls_extensions. [Alexandre * Correctly handle case where server hello does not request extension specified by client. [mathewmarcus]
Dulaunoy]
* Merge pull request #16 from mathewmarcus/tls_extensions. [Alexandre Dulaunoy]
Tls extensions Tls extensions
- Code cleanup. [mathewmarcus]
- Added support for SNI. [mathewmarcus] * Code cleanup. [mathewmarcus]
- Added support for encrypt-then-mac. [mathewmarcus]
- Finished support for extended master secret. [mathewmarcus] * Added support for SNI. [mathewmarcus]
- Calculate session hash. [mathewmarcus]
- Added struct to store extensions. [mathewmarcus] * Added support for encrypt-then-mac. [mathewmarcus]
- Added struct to store extensions. [mathewmarcus]
- Revert "moved struct ssl_decoder_ definition into header file because * Finished support for extended master secret. [mathewmarcus]
we need it in ssl.enums.c" [Mathew Marcus]
* Calculate session hash. [mathewmarcus]
* Added struct to store extensions. [mathewmarcus]
* Added struct to store extensions. [mathewmarcus]
* Revert "moved struct ssl_decoder_ definition into header file because we need it in ssl.enums.c" [Mathew Marcus]
This reverts commit 193c6001086920c0623593aba373f948aa275f8d. This reverts commit 193c6001086920c0623593aba373f948aa275f8d.
- Moved struct ssl_decoder_ definition into header file because we need
it in ssl.enums.c. [mathewmarcus] * Moved struct ssl_decoder_ definition into header file because we need it in ssl.enums.c. [mathewmarcus]
- Added handler for extended master secret extension. [mathewmarcus]
- Rename functions. [mathewmarcus] * Added handler for extended master secret extension. [mathewmarcus]
- Record handshake messages for session hash. [Mathew Marcus]
- Include extensions in output. [mathewmarcus] * Rename functions. [mathewmarcus]
- Merge pull request #15 from Whissi/update-ciphers. [Alexandre
Dulaunoy] * Record handshake messages for session hash. [Mathew Marcus]
* Include extensions in output. [mathewmarcus]
* Merge pull request #15 from Whissi/update-ciphers. [Alexandre Dulaunoy]
Update ciphers Update ciphers
- Adjust cipher suite formation. [Thomas Deutschmann]
- Add TLS 1.3 cipher suites. [Thomas Deutschmann] * Adjust cipher suite formation. [Thomas Deutschmann]
- Add fallback signaling cipher suite. [Thomas Deutschmann]
- Add CHACHA20_POLY1305 cipher suite. [Thomas Deutschmann] * Add TLS 1.3 cipher suites. [Thomas Deutschmann]
- Merge pull request #14 from davidkretch/fix-typo. [Alexandre Dulaunoy]
* Add fallback signaling cipher suite. [Thomas Deutschmann]
* Add CHACHA20_POLY1305 cipher suite. [Thomas Deutschmann]
* Merge pull request #14 from davidkretch/fix-typo. [Alexandre Dulaunoy]
Fix a typo in the man page Fix a typo in the man page
- Fix a typo in the man page. [David Kretch]
* Fix a typo in the man page. [David Kretch]
Delete the extra "to" in "To decrypt traffic to to host" under the examples section. Delete the extra "to" in "To decrypt traffic to to host" under the examples section.
- Merge pull request #13 from alperakcan/master. [Alexandre Dulaunoy]
* Merge pull request #13 from alperakcan/master. [Alexandre Dulaunoy]
fix ssl record queue data read fix ssl record queue data read
- - fix mis calculation of read_left if queue already has some data,
which might not be bigger than ssl_header_size - update q->ptr only if * - fix mis calculation of read_left if queue already has some data, which might not be bigger than ssl_header_size - update q->ptr only if q->data is changed. [Alper Akcan]
q->data is changed. [Alper Akcan]
- Merge pull request #1 from adulau/master. [Alper Akcan] * Merge pull request #1 from adulau/master. [Alper Akcan]
Merge pull request #12 from alperakcan/master Merge pull request #12 from alperakcan/master
- Merge pull request #12 from alperakcan/master. [Alexandre Dulaunoy]
* Merge pull request #12 from alperakcan/master. [Alexandre Dulaunoy]
Fix packet length calculation if IP length is 0, due to TSO Fix packet length calculation if IP length is 0, due to TSO
- Fix packet length calculation if IP length is 0, due to TSO. [Alper
Akcan] * Fix packet length calculation if IP length is 0, due to TSO. [Alper Akcan]
- Typo fixed. [Alexandre Dulaunoy]
- Explanation added in a new README. [Alexandre Dulaunoy] * Typo fixed. [Alexandre Dulaunoy]
- Merge pull request #9 from PequalsNP-team/master. [Alexandre Dulaunoy]
* Explanation added in a new README. [Alexandre Dulaunoy]
* Merge pull request #9 from PequalsNP-team/master. [Alexandre Dulaunoy]
updated configure for new libpcap location on most linux distro updated configure for new libpcap location on most linux distro
- Updated configure for new libpcap location on most linux distro.
[thez3ro] * Updated configure for new libpcap location on most linux distro. [thez3ro]
- Merge pull request #7 from knowtoto/master. [Alexandre Dulaunoy]
* Merge pull request #7 from knowtoto/master. [Alexandre Dulaunoy]
Fix a null pointer dereference bug Fix a null pointer dereference bug
- Fix a null pointer dereference bug of tls12_prf be caused by invalid
extern declaration for digests variable. [hyunkyu.oh] * Fix a null pointer dereference bug of tls12_prf be caused by invalid extern declaration for digests variable. [hyunkyu.oh]
- Merge pull request #5 from wllm-rbnt/master. [Alexandre Dulaunoy]
* Merge pull request #5 from wllm-rbnt/master. [Alexandre Dulaunoy]
More code cleaning More code cleaning
- Include string.h (remove warnings about memcpy) [William Robinet]
- Fix order of arguments in calls to calloc. [William Robinet] * Include string.h (remove warnings about memcpy) [William Robinet]
- "Each invocation of va_start() must be matched by a corresponding
invocation of va_end()" [William Robinet] * Fix order of arguments in calls to calloc. [William Robinet]
- Remove dead code. [William Robinet]
- Do not use uninitialized variable. [William Robinet] * "Each invocation of va_start() must be matched by a corresponding invocation of va_end()" [William Robinet]
- Make valgrind/memcheck happy. [William Robinet]
- Add missing comma (introduced by * Remove dead code. [William Robinet]
2d067c26503ace1466d132e7efd9f0ff7885295a) [William Robinet]
- Merge pull request #4 from wllm-rbnt/master. [Alexandre Dulaunoy] * Do not use uninitialized variable. [William Robinet]
* Make valgrind/memcheck happy. [William Robinet]
* Add missing comma (introduced by 2d067c26503ace1466d132e7efd9f0ff7885295a) [William Robinet]
* Merge pull request #4 from wllm-rbnt/master. [Alexandre Dulaunoy]
Fix cleanup loop Fix cleanup loop
- Avoid auto-vivisection during connection clean-up ... [William
Robinet] * Avoid auto-vivisection during connection clean-up ... [William Robinet]
- Fix inactive connection removal. [William Robinet]
- Merge pull request #3 from wllm-rbnt/master. [Alexandre Dulaunoy] * Fix inactive connection removal. [William Robinet]
* Merge pull request #3 from wllm-rbnt/master. [Alexandre Dulaunoy]
[bugfix] Initialize initial reference timeval [bugfix] Initialize initial reference timeval
- Initialize initial reference timeval Avoids wrong cleaning of first
connection(s) [William Robinet] * Initialize initial reference timeval Avoids wrong cleaning of first connection(s) [William Robinet]
- Merge pull request #2 from wllm-rbnt/master. [Alexandre Dulaunoy]
* Merge pull request #2 from wllm-rbnt/master. [Alexandre Dulaunoy]
Fixes for 2 memory leaks and in flight structure cleaning Fixes for 2 memory leaks and in flight structure cleaning
- Fix memory leak if SSL session id is not present. [William Robinet]
- In flight connection pool cleaning. [William Robinet] * Fix memory leak if SSL session id is not present. [William Robinet]
- Fix memory leak at connection closing. [William Robinet]
- Merge pull request #1 from wllm-rbnt/csloop. [Alexandre Dulaunoy] * In flight connection pool cleaning. [William Robinet]
* Fix memory leak at connection closing. [William Robinet]
* Merge pull request #1 from wllm-rbnt/csloop. [Alexandre Dulaunoy]
Fix for infinite loop in Ciphers Suite decoding Fix for infinite loop in Ciphers Suite decoding
- Fix for infinite loop in Ciphers Suite decoding. [William Robinet]
- Dtable bug fixed: list overrun (from NetBSD tree) [Alexandre Dulaunoy] * Fix for infinite loop in Ciphers Suite decoding. [William Robinet]
- Memory leak per TLS session removed. Call cleanup after each
finalization. [Alexandre Dulaunoy] * Dtable bug fixed: list overrun (from NetBSD tree) [Alexandre Dulaunoy]
- Free also the packet structure. [Alexandre Dulaunoy]
- Snaplen increased to the default jumbo frame size. [Alexandre * Memory leak per TLS session removed. Call cleanup after each finalization. [Alexandre Dulaunoy]
Dulaunoy]
* Free also the packet structure. [Alexandre Dulaunoy]
* Snaplen increased to the default jumbo frame size. [Alexandre Dulaunoy]
If the snaplen is lower than the total frame length announced, If the snaplen is lower than the total frame length announced,
ssldump won't be able to reassemble the payload. "Length mismatch" ssldump won't be able to reassemble the payload. "Length mismatch"
error. Tested on Ethernet uplinks supporting jumbo frame. error. Tested on Ethernet uplinks supporting jumbo frame.
- Continue even if no IP address is assigned on the interface.
[Alexandre Dulaunoy] * Continue even if no IP address is assigned on the interface. [Alexandre Dulaunoy]
ssldump in a production environment can be used on a capture ssldump in a production environment can be used on a capture
interface where no IP addresses are assigned. Print a warning instead interface where no IP addresses are assigned. Print a warning instead
of exiting. of exiting.
- Modern config.guess/sub from Ubuntu ssldump package. [Alexandre
Dulaunoy] * Modern config.guess/sub from Ubuntu ssldump package. [Alexandre Dulaunoy]
- Ssldump-0.9-ciphersuites.patch. [Alexandre Dulaunoy]
- Ssldump-0.9-ssl-enums.patch. [Alexandre Dulaunoy] * Ssldump-0.9-ciphersuites.patch. [Alexandre Dulaunoy]
- Ssldump-0.9-tlsv12.patch. [Alexandre Dulaunoy]
- Ssldump-0.9-pcap-vlan.patch. [Alexandre Dulaunoy] * Ssldump-0.9-ssl-enums.patch. [Alexandre Dulaunoy]
- Ssldump-0.9-link_layer.patch. [Alexandre Dulaunoy]
- Ssldump-0.9-table-stops.patch. [Alexandre Dulaunoy] * Ssldump-0.9-tlsv12.patch. [Alexandre Dulaunoy]
- Sldump-0.9-cvs-20060619.patch. [Alexandre Dulaunoy]
- Sldump-0.9-aes.patch. [Alexandre Dulaunoy] * Ssldump-0.9-pcap-vlan.patch. [Alexandre Dulaunoy]
- Sldump-0.9-libpcap.patch. [Alexandre Dulaunoy]
- Ssldump-0.9-openssl.patch. [Alexandre Dulaunoy] * Ssldump-0.9-link_layer.patch. [Alexandre Dulaunoy]
- Ssldump_0.9b3.orig.tar.gz Import. [Alexandre Dulaunoy]
* Ssldump-0.9-table-stops.patch. [Alexandre Dulaunoy]
* Sldump-0.9-cvs-20060619.patch. [Alexandre Dulaunoy]
* Sldump-0.9-aes.patch. [Alexandre Dulaunoy]
* Sldump-0.9-libpcap.patch. [Alexandre Dulaunoy]
* Ssldump-0.9-openssl.patch. [Alexandre Dulaunoy]
* Ssldump_0.9b3.orig.tar.gz Import. [Alexandre Dulaunoy]