diff options
| author | Aldo Cortesi <aldo@nullcube.com> | 2012-04-04 11:24:58 +1200 |
|---|---|---|
| committer | Aldo Cortesi <aldo@nullcube.com> | 2012-04-04 11:24:58 +1200 |
| commit | 8110a9a3eb3280092a69d916cd135aedcdfe4120 (patch) | |
| tree | 131062fe698fbea41118d3399bd2f3544aa4fd4d /doc-src/upstreamcerts.html | |
| parent | d8cadd2ff35ea654ffdd9f646005fbb84755c812 (diff) | |
| download | mitmproxy-8110a9a3eb3280092a69d916cd135aedcdfe4120.tar.gz mitmproxy-8110a9a3eb3280092a69d916cd135aedcdfe4120.tar.bz2 mitmproxy-8110a9a3eb3280092a69d916cd135aedcdfe4120.zip | |
Start prepping docs for 0.8
Also add an interactive upstream-cert option to mitmproxy, and repair help for
R shortcut.
Diffstat (limited to 'doc-src/upstreamcerts.html')
| -rw-r--r-- | doc-src/upstreamcerts.html | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/doc-src/upstreamcerts.html b/doc-src/upstreamcerts.html new file mode 100644 index 00000000..804286d9 --- /dev/null +++ b/doc-src/upstreamcerts.html @@ -0,0 +1,15 @@ +- command-line: _--upstream-cert_ +- mitmproxy shortcut: _o_, then _u_ + +In its normal mode of operation, mitmproxy will use the target domain specified +in a client's proxy request to generate an interception certificate. When +__upstream-cert__ mode is activated a different procedure is followed: we first +connect to the specified remote server to retrieve the server's __Common Name__ +and __Subject Alternative Names__. This feature is especially useful when the +client specifies an IP address rather than a host name in the proxy request. If +this is the case, we can only generate a certificate if we can establish the +__CN__ and __SANs__ from the upstream server. + +Note that __upstream-cert__ mode does not work when the remote server relies on +[Server Name Indication](http://en.wikipedia.org/wiki/Server_Name_Indication). +Luckily, SNI is still not very widely used. |