Ku dar TLS ka dib markii Perl uu furay isku xirka SOCKS

Ku dheji IO::Socket::SSL isku xirka IO::Socket::Socks oo xaqiiji magaca martigeliyaha meesha loo socdo.

Isku xirka SOCKS iyo isku xirka TLS waxay leeyihiin hawlo kala duwan. Marka hore ka hel qulqulka byte ee meesha loo socdo iyada oo loo marayo SOCKS. Kadib ku bilow TLS qulqulkaas, adigoo aqoonsanaya websaydhka meesha loo socdo ee aan ahayn proxy-ga.

Xagga TLS nooca HTTPS, habaynta waxay noqon kartaa:

use IO::Socket::Socks;
use IO::Socket::SSL;

my $target = 'example.com';
my $socket = IO::Socket::Socks->new(
    SocksVersion => 5,
    ProxyAddr => '127.0.0.1',
    ProxyPort => 1080,
    ConnectAddr => $target,
    ConnectPort => 443,
) or die $!;

IO::Socket::SSL->start_SSL(
    $socket,
    SSL_hostname => $target,
    SSL_verifycn_name => $target,
    SSL_verifycn_scheme => 'http',
    SSL_verify_mode => SSL_VERIFY_PEER,
) or die IO::Socket::SSL::errstr();

Bartilmaameed HTTPS ah oo ku yaal waddo proxy dadweyne oo la ogolaaday, liiska proxy SOCKS5 waxay bixisaa musharixiin ProxyAddr iyo ProxyPort. Qaybtan waxay dhistaa lakabyada gaadiidka; codsigu wali waa inuu diraa borotokoolka uu filayo meesha loo socdo oo uu xiro socket-ka marka uu dhammeeyo.

Hayso magaca lammaanaha loogu talagalay

Barta ugu dambeysa ee proxy-ga waxay ka tirsan tahay isku xirka koowaad. TLS SNI iyo xaqiijinta magaca martigeliyaha waxay khuseeyaan example.com. Isticmaalka magaca martigeliyaha proxy-ga marxaladdaas waxay codsan karta ama xaqiijin karta aqoonsi khaldan.

Habaynta kaydka kalsoonida waa shuruud kale oo madax banaan. Isticmaal habaynta CA ee uu codsigu ugu talagalay halkii aad isticmaali lahayd callback wax walba aaminsan oo laga soo guuriyay tusaale cilmi-baaris.

Haddii tallaabada SOCKS fashilanto, beddelka halbeegyada TLS ma hagaajin doono. Haddii SOCKS guuleysto oo TLS fashilanto, hayso qaladka shahaadada iyo magaca martigeliyaha caddayn ahaan halkii aad uga dhiggi lahayd cilad guud oo proxy.

Magacyada module-yaduna way muhiim yihiin: IO::Socket::Socks iyo IO::Socket::SSL waxay bixiyaan dhiseyaal iyo dhaqan cusboonaysiin oo kala duwan. Socket TCP ceyriin oo kaliya gaaray proxy-ga wali ma dhammeeyo gorgortanka meesha loo socdo ee SOCKS.

Maqaallo la xiriira