1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
# Copyright (c) 2015, inaz2
# Copyright (C) 2021 jahoti <jahoti@tilde.team>
# Licensing information is collated in the `copyright` file
"""
The core for a "virtual network" proxy
Be sure to run this inside your intended certificates directory.
"""
import os, socket, ssl, subprocess, sys, threading, time
from http.server import HTTPServer, BaseHTTPRequestHandler
from socketserver import ThreadingMixIn
gen_cert_req, lock = 'openssl req -new -key %scert.key -subj /CN=%s', threading.Lock()
sign_cert_req = 'openssl x509 -req -days 3650 -CA %sca.crt -CAkey %sca.key -set_serial %d -out %s'
def popen(command, *args, **kwargs):
return subprocess.Popen((command % args).split(' '), **kwargs)
class ProxyRequestHandler(BaseHTTPRequestHandler):
"""Handles a network request made to the proxy"""
certdir = ''
def log_error(self, format, *args):
# suppress "Request timed out: timeout('timed out',)"
if isinstance(args[0], socket.timeout):
return
self.log_message(format, *args)
def do_CONNECT(self):
hostname = self.path.split(':')[0]
certpath = '%s%s.crt' % (certdir, hostname if hostname != 'ca' else 'CA')
with lock:
if not os.path.isfile(certpath):
p1 = popen(gen_cert_req, certdir, hostname, stdout=subprocess.PIPE).stdout
popen(sign_cert_req, certdir, certdir, time.time() * 1000, certpath, stdin=p1, stderr=subprocess.PIPE).communicate()
self.send_response(200)
self.end_headers()
self.connection = ssl.wrap_socket(self.connection, keyfile=certdir+'cert.key', certfile=certpath, server_side=True)
self.rfile = self.connection.makefile('rb', self.rbufsize)
self.wfile = self.connection.makefile('wb', self.wbufsize)
self.close_connection = int(self.headers.get('Proxy-Connection', '').lower() == 'close')
def proxy(self):
content_length = int(self.headers.get('Content-Length', 0))
req_body = self.rfile.read(content_length) if content_length else None
if self.path[0] == '/':
if isinstance(self.connection, ssl.SSLSocket):
self.path = 'https://%s%s' % (self.headers['Host'], self.path)
else:
self.path = 'http://%s%s' % (self.headers['Host'], self.path)
self.handle_request(req_body)
do_OPTIONS = do_DELETE = do_PUT = do_HEAD = do_POST = do_GET = proxy
def handle_request(self, req_body):
pass
class ThreadingHTTPServer(ThreadingMixIn, HTTPServer):
"""The actual proxy server"""
address_family, daemon_threads = socket.AF_INET6, True
def handle_error(self, request, client_address):
# suppress socket/ssl related errors
cls, e = sys.exc_info()[:2]
if not (cls is socket.error or cls is ssl.SSLError):
return HTTPServer.handle_error(self, request, client_address)
|
