Enhance middle sni split

Instead of real middle sni we use targetted middle sni for explicit (not
all) sni domain list
This commit is contained in:
Vadim Vetrov
2024-09-28 11:31:46 +03:00
parent 82c49119d3
commit 3ee979f7d1
3 changed files with 8 additions and 4 deletions

4
tls.c
View File

@@ -122,6 +122,7 @@ struct tls_verdict analyze_tls_data(
char *sni_name = (char *)sni_ext_ptr;
vrd.sni_offset = (uint8_t *)sni_name - data;
vrd.sni_target_offset = vrd.sni_offset;
vrd.sni_len = sni_len;
if (config.all_domains) {
@@ -129,7 +130,6 @@ struct tls_verdict analyze_tls_data(
goto check_domain;
}
unsigned int j = 0;
for (unsigned int i = 0; i <= config.domains_strlen; i++) {
if ( i > j &&
@@ -148,6 +148,7 @@ struct tls_verdict analyze_tls_data(
domain_startp,
domain_len)) {
vrd.target_sni = 1;
vrd.sni_target_offset = (const uint8_t *)sni_startp - data;
goto check_domain;
}
@@ -247,6 +248,7 @@ brute:
vrd.target_sni = 1;
vrd.sni_len = domain_len;
vrd.sni_offset = (k - domain_len - 1);
vrd.sni_target_offset = vrd.sni_offset
NETBUF_FREE(buf);
NETBUF_FREE(nzbuf);
goto out;