Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for HTTPS #2

Open
bcoles opened this issue Dec 21, 2017 · 0 comments
Open

Add support for HTTPS #2

bcoles opened this issue Dec 21, 2017 · 0 comments

Comments

@bcoles
Copy link
Owner

bcoles commented Dec 21, 2017

The SSRF Proxy library for Ruby supports HTTPS requests, however the server is not a HTTPS proxy and does not support SSL/TLS tunneling.

I have a somewhat-working implementation, however it's lacking a few niceties and is not yet suitable for release. There's also some additional refactoring to be done as part of the changes.

SSL/TLS tunneling will be implemented in the next release: SSRF Proxy version 0.0.5.

In the interim, a temporary workaround exists.

When the --rules ssl option is specified, SSRF Proxy will change the URL scheme to https for all client requests. This effectively allows communications with third-party servers via SSRF using HTTPS. Note that changing the rules requires restarting the proxy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant