Module proxy 

Available on crate feature boring only.

Boring(ssl) proxy support for Rama.

While a proxy can be seen as a combination of a server and a client, this module provides explicit support for certain proxy flows.

For example MITM support found in this module is there to facilitate an explicit MITM flow such that high level you have the following handshake:

client | --- client hello (A) ----> | proxy |                               | server |
       |                            |       | ------- client hello (B) ---> |        |
       |                            |       | <------ server hello (C) ---- |        |
       | <--- server hello (D) ---- |       |                               |        |

Where:

1. Client Hello of (B) is based on Client Hello of (A);
2. Server config of (C) is based on server hello of (B);
3. Issued cert for (C) is based on a mirror from the server cert used in (B).

NOTE that (1) requires that you provide the CH converted as connector data to the TlsMitmRelay prior to handshake (relay). In other words, even though it is recommended, it is optional.

Modules

cert_issuer

Structs

TlsMitmRelay

A utility that can be used by MITM services such as transparent proxies, in order to relay (and MITM a TLS connection between a client and server, as part of a deep protocol inspection protocol (DPI) flow.

TlsMitmRelayError

Error type for TlsMitmRelay::handshake and the service using it.

TlsMitmRelayService

A utility that can be used by MITM services such as transparent proxies, in order to relay (and MITM a TLS connection between a client and server, as part of a deep protocol inspection protocol (DPI) flow.

Enums

HandshakeRelayClassification

Classification of a handshake-time failure.

TlsMitmRelayErrorDirection

Which side of the MITM relay a handshake error occurred on.

TlsMitmRelayErrorKind

Kind of TlsMitmRelayError. Pattern-match this to drive caller-side policy.