baaee0ad4dfix(portproxy): Enforce TLS handshake and SNI validation on port 443 by blocking non-TLS connections and terminating session resumption attempts without SNI when allowSessionTicket is disabled.
Philipp Kunz
2025-03-12 10:27:25 +00:00
ab1ec84832fix(tls/sni): Improve logging for TLS session resumption by extracting and logging SNI values from ClientHello messages.
Philipp Kunz
2025-03-12 10:01:54 +00:00
1a90566622fix(TLS/SNI): Improve TLS session resumption handling and logging. Now, session resumption attempts are always logged with details, and connections without a proper SNI are rejected when allowSessionTicket is disabled. In addition, empty SNI extensions are explicitly treated as missing, ensuring stricter and more consistent TLS handshake validation.
Philipp Kunz
2025-03-12 09:56:21 +00:00
62a3e1f4b7fix(SniHandler): Improve TLS SNI session resumption handling: connections containing a session ticket are now only rejected when no SNI is present and allowSessionTicket is disabled. Updated return values and logging for clearer resumption detection.
Philipp Kunz
2025-03-11 19:38:41 +00:00
29d28fba93feat(SniHandler): Add session cache support and tab reactivation detection to improve SNI extraction in TLS handshakes
Philipp Kunz
2025-03-11 18:05:20 +00:00
415b82a84afix(PortProxy): Improve SNI extraction handling in PortProxy by passing explicit connection info to extractSNIWithResumptionSupport for better TLS renegotiation and debug logging.
Philipp Kunz
2025-03-11 17:37:43 +00:00
0e12706176feat(SniHandler): Enhance SNI extraction to support fragmented ClientHello messages, TLS 1.3 early data, and improved PSK parsing
Philipp Kunz
2025-03-11 17:33:31 +00:00
36e4341315fix(snihandler): Enhance SNI extraction to support TLS 1.3 PSK-based session resumption by adding a dedicated extractSNIFromPSKExtension method and improved logging for session resumption indicators.
Philipp Kunz
2025-03-11 17:23:57 +00:00
43378becd2fix(PortProxy): Improve buffering and data handling during connection setup in PortProxy to prevent data loss
Philipp Kunz
2025-03-11 17:05:15 +00:00
e31c84493ffeat(core): Improve wildcard domain matching and enhance NetworkProxy integration in PortProxy. Added support for TLD wildcards and complex wildcard patterns in the router, and refactored TLS renegotiation handling for stricter SNI enforcement.
Philipp Kunz
2025-03-11 11:34:29 +00:00
85cc57ae10fix(PortProxy): Simplify TLS handshake SNI extraction and update timeout settings in PortProxy for improved maintainability and reliability.
Philipp Kunz
2025-03-11 09:12:40 +00:00
865d21b36afix(portproxy): Relax TLS handshake and connection timeout settings for improved stability in chained proxy scenarios; update TLS session cache defaults and add keep-alive flags to connection records.
Philipp Kunz
2025-03-11 04:39:17 +00:00
ccccc5b8c8feat(PortProxy): Enhance TLS session cache, SNI extraction, and chained proxy support in PortProxy. Improve handling of multiple and fragmented TLS records, and add new configuration options (isChainedProxy, chainPosition, aggressiveTlsRefresh, tlsSessionCache) for robust TLS certificate refresh.
Philipp Kunz
2025-03-11 04:24:29 +00:00
d6022c8f8afix(PortProxy): Improve TLS handshake buffering and enhance debug logging for SNI forwarding in PortProxy
Philipp Kunz
2025-03-11 03:48:10 +00:00
0ea0f02428fix(PortProxy): Improve connection reliability for initial and resumed TLS sessions
Philipp Kunz
2025-03-11 03:33:03 +00:00
788b444fccfix(PortProxy): Improve TLS renegotiation SNI handling by first checking if the new SNI is allowed under the existing domain config. If not, attempt to find an alternative domain config and update the locked domain accordingly; otherwise, terminate the connection on SNI mismatch.
Philipp Kunz
2025-03-11 02:25:58 +00:00
74fdb58f84fix(PortProxy): Improve TLS renegotiation handling in PortProxy by validating the new SNI against allowed domain configurations. If the new SNI is permitted based on existing IP rules, update the locked domain to allow connection reuse; otherwise, terminate the connection to prevent misrouting.
Philipp Kunz
2025-03-11 02:18:56 +00:00
0e605d9a9dfix(PortProxy): Improved code formatting and readability in PortProxy class by adjusting spacing and comments.
Philipp Kunz
2025-03-06 22:56:18 +00:00
Philipp Kunz