Function proxyHTTPS

http.go:142–175

service an incoming HTTPS connection on conn by sending a request out to the world through dst.

(dst http.RoundTripper, conn net.Conn, root *certin.KeyAndCert)

// service an incoming HTTPS connection on conn by sending a request out to the world through dst.
func proxyHTTPS(dst http.RoundTripper, conn net.Conn, root *certin.KeyAndCert) {
	defer handlePanic()
	defer conn.Close()

	verbosef("intercepted a connection to %v", conn.LocalAddr())

	// wrap the connection with a byte counter
	counts := countBytesConn{Conn: conn}
	conn = &counts

	// create a tls server with certificates generated on-the-fly from our root CA
	var serverName string
	tlsconn := tls.Server(conn, &tls.Config{
		GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
			verbosef("got challenge for %q", hello.ServerName)
			serverName = hello.ServerName

			altNames := []string{ipFromAddr(conn.LocalAddr()).String()}
			onthefly, err := certin.NewCert(root, certin.Request{CN: hello.ServerName, SANs: altNames})
			if err != nil {
				errorf("error creating cert: %v", err)
				return nil, fmt.Errorf("error creating on-the-fly certificate for %q: %w", hello.ServerName, err)
			}

			tlscert := onthefly.TLSCertificate()
			return &tlscert, nil
		},
	})
	defer tlsconn.Close()

	verbosef("reading request sent to %v (%v) ...", conn.LocalAddr(), serverName)

	proxyHTTPScheme(dst, tlsconn, "https")
}

// Service an incoming HTTP connection on conn by sending a request out to the world through dst.
// All HTTP requests sent to dst will have a context containing a value for the key dialToContextKey.