Method manInTheMiddle

proxy/mitm.go:94–238

(client net.Conn, host string)

var mitmSessionCounter int64

func (proxy *ProxyClient) manInTheMiddle(client net.Conn, host string) {
	_host, _ := splitHostPort(host)
	// try self signing a cert of this host
	cert := proxy.sign(_host)
	if cert == nil {
		return
	}

	client.Write(okHTTP)

	go func() {

		counter := atomic.AddInt64(&mitmSessionCounter, 1)

		tlsClient := tls.Server(client, &tls.Config{
			InsecureSkipVerify: true,
			Certificates:       []tls.Certificate{*cert},
		})

		if err := tlsClient.Handshake(); err != nil {
			proxy.Logger.E("MITM", "Handshake", host, err)
			return
		}

		bufTLSClient := bufio.NewReader(tlsClient)

		for {
			proxy.Cipher.IO.markActive(tlsClient, 0)

			var err error
			var rURL string
			var buf []byte
			if buf, err = bufTLSClient.Peek(3); err == io.EOF || len(buf) != 3 {
				break
			}

			req, err := http.ReadRequest(bufTLSClient)
			if err != nil {
				if !isClosedConnErr(err) && buf[0] != ')' {
					proxy.Logger.E("MITM", "Can't read request", err)
				}
				break
			}

			if proxy.MITMDump != nil {
				buf, _ := httputil.DumpRequest(req, false)

				var b buffer
				b.WriteString(fmt.Sprintf("# %s <<<<<< request %d >>>>>>\n", timeStampMilli(), counter))
				b.Write(buf)

				proxy.MITMDump.Write(b.Bytes())
			}

			rURL = req.URL.Host
			req.Header.Del("Proxy-Authorization")
			req.Header.Del("Proxy-Connection")