On-the-fly certificate forgery

This commit is contained in:
Pascal Engélibert 2026-08-24 09:30:18 +02:00
commit 28d623fc3d
8 changed files with 920 additions and 447 deletions

View file

@ -10,8 +10,6 @@ env_logger = "0.11.8"
futures-util = "0.3.31"
log = "0.4.28"
rustls-platform-verifier = "0.6.2"
#sslrelay = { path = "../sslrelay", optional = true }
sslrelay = { git = "https://git.zoai.re/tuxmain/sslrelay.git", rev = "11a4777cfebfc41695583c23c545478dc50bdbe0", optional = true }
static_cell = "2.1.1"
tokio = { version = "1.49.0", features = ["io-util", "macros", "net", "rt-multi-thread", "sync", "time"]}
tokio-rustls = "0.26.4"
@ -29,13 +27,20 @@ rustls-openssl = { version = "0.3.0", default-features = false, features = ["tls
rustls-post-quantum = { version = "0.2.4", optional = true }
rustls-symcrypt = { version = "0.2.1", optional = true, features = ["chacha", "x25519"] }
# Record
dashmap = { version = "6.2.1", optional = true }
dns-lookup = { version = "3.0.1", optional = true }
openssl = { version = "0.10.81", optional = true }
#sslrelay = { path = "../sslrelay", optional = true }
sslrelay = { git = "https://git.zoai.re/tuxmain/sslrelay.git", rev = "5e0007fab63a11ab0ca52586c8fc35cb560116bf", optional = true }
[features]
default = [
"aws-lc",# Change this to the wanted cryptographic backend (list below)
#"record",# It may be needed to remove the record feature when building with openssl
"record",# It may be needed to remove the record feature when building with openssl
]
record = ["sslrelay"]
record = ["dashmap", "dns-lookup", "dep:openssl", "sslrelay"]
# Available cryptographic backends
aws-lc = ["tokio-rustls/aws-lc-rs", "rustls-post-quantum", "rustls-post-quantum/aws-lc-rs-unstable", "aws-lc-rs"]
@ -48,3 +53,7 @@ symcrypt = ["rustls-symcrypt"]
[profile.release]
lto = "fat"
[patch.crates-io]
#openssl = { path = "../rust-openssl/openssl" }
#openssl-sys = { path = "../rust-openssl/openssl-sys" }