Comments (7)
Эта проблема связана с Cloudflare, когда модификация SNI выключена, она отсутствует. Думаю, что можно с этим сделать.
from powertunnel.
Эта проблема связана с Cloudflare, когда модификация SNI выключена, она отсутствует. Думаю, что можно с этим сделать.
I'm facing same issue. Any workaround for this (with sni, not chuck)?
from powertunnel.
Not yet, but you can disable these warnings in Chrome (this is not a good way though)
from powertunnel.
Not yet, but you can disable these warnings in Chrome (this is not a good way though)
Disabling warnings don't seems to work. These sites are basically behind CDNs, that strictly requires the correct SNI field to serve the right certificate (and the right server to connect to?). Faking SNI simply breaks this mechanism.
I don't know (in-depth) exactly how the HTTPS connection establishes but, is it somehow possible to generate the (self-signed) cert from client request SNI/host (Fiddler does it), so that the CN matches and the handshake is successful. Then after that, somehow tell server the actual site we're trying to connect to via host header or something?
from powertunnel.
Disabling warnings don't seems to work. These sites are basically behind CDNs, that strictly requires the correct SNI field to serve the right certificate (and the right server to connect to?). Faking SNI simply breaks this mechanism.
Yes, that's the problem. IIRC I wrote a detailed explaination in other thread some time ago.
I don't know (in-depth) exactly how the HTTPS connection establishes but, is it somehow possible to generate the (self-signed) cert from client request SNI/host (Fiddler does it), so that the CN matches and the handshake is successful. Then after that, somehow tell server the actual site we're trying to connect to via host header or something?
MITM is done by LittleProxy and its extension LittleProxy-mitm. Certificate generation is requested here, and it the certificates changes then, which is the problem. I tried to debug this previously, but I did not succeed. I will try again today.
from powertunnel.
MITM is done by LittleProxy and its extension LittleProxy-mitm. Certificate generation is requested here, and it the certificates changes then, which is the problem. I tried to debug this previously, but I did not succeed. I will try again today.
Did some read up and seems like it should be fairly simple. We just have to get the SNI/host from the client request and use it as the COMMON_NAME (CN) for self generated certificate (instead of using CN received from server). I don't know Java that much, otherwise I'd test this approach..
from powertunnel.
Yes that's it. Though I don't see a way to obtain it yet.
from powertunnel.
Related Issues (20)
- CLI --upstream-auth-password not found HOT 6
- Powertunnel not working on mobile data HOT 3
- Ломается static.twitchcdn.net HOT 5
- Random sites give closed connection HOT 2
- Vpn is not working inspite of connection. HOT 1
- HTTP/3 Support over QUIC with Kwik (Feature Request) HOT 1
- VPN mode in desktop version? HOT 13
- [Feature Request] Appimage support
- Flatpak support (Linux) HOT 1
- Fake SNI broke website HOT 2
- [Suggestion] Fake Packet mode HOT 2
- Не получается настроить доступ к серверам Google на Fedora Linux HOT 2
- Why PowerTunnel uses tcp6 HOT 4
- Not working in India HOT 1
- Cant connect internet HOT 5
- PR_END_OF_FILE_ERROR on only some websites HOT 1
- Not working on Windows 7 without DNSCrypt Proxy HOT 2
- PowerTunnel doesn't restore the system proxy if the app doesn't terminate cleanly when Windows is shutting down
- Chrome browser's ERR_PROXY_CONNECTION_FAILED issue with the restored system proxy setting after stopping the PowerTunnel server in Windows 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from powertunnel.