From 538f9308333444e6bc44b1de61d57f219ea156b0 Mon Sep 17 00:00:00 2001 From: lqqyt2423 <974923609@qq.com> Date: Sat, 5 Dec 2020 19:00:52 +0800 Subject: [PATCH] =?UTF-8?q?=E8=BD=AC=E5=8F=91https=E9=80=BB=E8=BE=91?= =?UTF-8?q?=E6=8A=BD=E5=8F=96=E5=87=BA=E6=9D=A5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- cmd/mitmproxy/main.go | 8 +++- proxy/mitm.go | 89 +++++++++++++++++++++++++++++++++++++++++++ proxy/proxy.go | 54 +++++++------------------- 3 files changed, 110 insertions(+), 41 deletions(-) create mode 100644 proxy/mitm.go diff --git a/cmd/mitmproxy/main.go b/cmd/mitmproxy/main.go index da9f9b9..9281ca8 100644 --- a/cmd/mitmproxy/main.go +++ b/cmd/mitmproxy/main.go @@ -12,5 +12,11 @@ func main() { opts := &proxy.Options{ Addr: ":9080", } - log.Fatal(proxy.NewProxy(opts).Start()) + + p, err := proxy.NewProxy(opts) + if err != nil { + log.Fatal(err) + } + + log.Fatal(p.Start()) } diff --git a/proxy/mitm.go b/proxy/mitm.go new file mode 100644 index 0000000..c813a1b --- /dev/null +++ b/proxy/mitm.go @@ -0,0 +1,89 @@ +package proxy + +import ( + "crypto/tls" + "log" + "net" + "net/http" + + "github.com/lqqyt2423/go-mitmproxy/cert" +) + +type Mitm interface { + Start() error + Dial(host string) (net.Conn, error) +} + +// 直接转发 https 流量 +type MitmForward struct{} + +func (m *MitmForward) Start() error { + return nil +} + +func (m *MitmForward) Dial(host string) (net.Conn, error) { + return net.Dial("tcp", host) +} + +// 内部解析 https 流量 +type MitmServer struct { + Proxy *Proxy + CA *cert.CA + Listener net.Listener + Server *http.Server +} + +func NewMitmServer(proxy *Proxy) (Mitm, error) { + ca, err := cert.NewCA("") + if err != nil { + return nil, err + } + + m := &MitmServer{ + Proxy: proxy, + CA: ca, + } + + server := &http.Server{ + Handler: m, + TLSConfig: &tls.Config{ + GetCertificate: func(chi *tls.ClientHelloInfo) (*tls.Certificate, error) { + // log.Printf("MitmServer GetCertificate ServerName: %v\n", chi.ServerName) + return ca.DummyCert(chi.ServerName) + }, + }, + } + + m.Server = server + + return m, nil +} + +func (m *MitmServer) Start() error { + ln, err := net.Listen("tcp", "127.0.0.1:") // port number is automatically chosen + if err != nil { + return err + } + m.Listener = ln + m.Server.Addr = ln.Addr().String() + log.Printf("MitmServer Server Addr is %v\n", m.Server.Addr) + defer ln.Close() + + return m.Server.ServeTLS(ln, "", "") +} + +func (m *MitmServer) Dial(host string) (net.Conn, error) { + return net.Dial("tcp", m.Server.Addr) +} + +func (m *MitmServer) ServeHTTP(res http.ResponseWriter, req *http.Request) { + if req.URL.Scheme == "" { + req.URL.Scheme = "https" + } + + if req.URL.Host == "" { + req.URL.Host = req.Host + } + + m.Proxy.ServeHTTP(res, req) +} diff --git a/proxy/proxy.go b/proxy/proxy.go index e237a56..093faa7 100644 --- a/proxy/proxy.go +++ b/proxy/proxy.go @@ -1,14 +1,10 @@ package proxy import ( - "crypto/tls" "io" "log" - "net" "net/http" "time" - - "github.com/lqqyt2423/go-mitmproxy/cert" ) type Options struct { @@ -17,23 +13,16 @@ type Options struct { type Proxy struct { Server *http.Server - - ca *cert.CA - extraNetListener net.Listener - extraServer *http.Server + Mitm Mitm } func (proxy *Proxy) Start() error { - ln, err := net.Listen("tcp", "127.0.0.1:") // port number is automatically chosen - if err != nil { - return err - } - proxy.extraNetListener = ln - proxy.extraServer.Addr = ln.Addr().String() - log.Printf("Proxy extraServer Addr is %v\n", proxy.extraServer.Addr) go func() { - defer ln.Close() - log.Fatal(proxy.extraServer.ServeTLS(ln, "", "")) + err := proxy.Mitm.Start() + if err != nil { + // TODO + log.Fatal(err) + } }() log.Printf("Proxy start listen at %v\n", proxy.Server.Addr) @@ -46,8 +35,6 @@ func (proxy *Proxy) ServeHTTP(res http.ResponseWriter, req *http.Request) { return } - log.Printf("url: %v\n", req.URL.String()) - if !req.URL.IsAbs() || req.URL.Host == "" { res.WriteHeader(400) _, err := io.WriteString(res, "此为代理服务器，不能直接发起请求") @@ -92,13 +79,9 @@ func (proxy *Proxy) ServeHTTP(res http.ResponseWriter, req *http.Request) { } func (proxy *Proxy) handleConnect(res http.ResponseWriter, req *http.Request) { - log.Printf("CONNECT: %v\n", req.Host) - - // 直接转发 - // conn, err := net.Dial("tcp", req.Host) + // log.Printf("CONNECT: %v\n", req.Host) - // 内部解析 HTTPS - conn, err := net.Dial("tcp", proxy.extraServer.Addr) + conn, err := proxy.Mitm.Dial(req.Host) if err != nil { log.Printf("error: %v, host: %v\n", err, req.Host) @@ -138,28 +121,19 @@ func (proxy *Proxy) handleConnect(res http.ResponseWriter, req *http.Request) { <-ch } -func NewProxy(opts *Options) *Proxy { +func NewProxy(opts *Options) (*Proxy, error) { proxy := new(Proxy) proxy.Server = &http.Server{ Addr: opts.Addr, Handler: proxy, } - ca, err := cert.NewCA("") + mitm, err := NewMitmServer(proxy) if err != nil { - panic(err) - } - proxy.ca = ca - proxy.extraServer = &http.Server{ - Handler: proxy, - TLSConfig: &tls.Config{ - PreferServerCipherSuites: true, - GetCertificate: func(chi *tls.ClientHelloInfo) (*tls.Certificate, error) { - log.Printf("GetCertificate ServerName: %v\n", chi.ServerName) - return proxy.ca.DummyCert(chi.ServerName) - }, - }, + return nil, err } - return proxy + proxy.Mitm = mitm + + return proxy, nil }