org.littleshoot.proxy.extras

Class SelfSignedMitmManager

java.lang.Object

org.littleshoot.proxy.extras.SelfSignedMitmManager

All Implemented Interfaces:

MitmManager

public class SelfSignedMitmManager
extends Object
implements MitmManager

MitmManager that uses self-signed certs for everything.

Field Summary

Fields

Modifier and Type	Field and Description
(package private) SelfSignedSslEngineSource	selfSignedSslEngineSource

Constructor Summary

Constructors

Constructor and Description
SelfSignedMitmManager()

Method Summary

Modifier and Type	Method and Description
SSLEngine	clientSslEngineFor(SSLSession serverSslSession) Creates an SSLEngine for encrypting the client connection based on the given serverSslSession.
SSLEngine	serverSslEngine(String peerHost, int peerPort) Creates an SSLEngine for encrypting the server connection.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

selfSignedSslEngineSource

SelfSignedSslEngineSource selfSignedSslEngineSource

Constructor Detail

SelfSignedMitmManager

public SelfSignedMitmManager()

Method Detail

serverSslEngine

public SSLEngine serverSslEngine(String peerHost,
                                 int peerPort)

Description copied from interface: MitmManager

Creates an SSLEngine for encrypting the server connection. Note: Peer information is needed to send the server_name extension in handshake with Server Name Indication (SNI).

Specified by:

serverSslEngine in interface MitmManager

Parameters:

peerHost - to start a client connection to the server.

peerPort - to start a client connection to the server.

Returns:

clientSslEngineFor

public SSLEngine clientSslEngineFor(SSLSession serverSslSession)

Description copied from interface: MitmManager

Creates an SSLEngine for encrypting the client connection based on the given serverSslSession.

The serverSslSession is provided in case this method needs to inspect the server's certificates or something else about the encryption on the way to the server.

This is the place where one would implement impersonation of the server by issuing replacement certificates signed by the proxy's own certificate.

Specified by:

clientSslEngineFor in interface MitmManager

Parameters:

serverSslSession - the SSLSession that's been established with the server

Returns: