net.lightbody.bmp.mitm.manager

Class ImpersonatingMitmManager

java.lang.Object

net.lightbody.bmp.mitm.manager.ImpersonatingMitmManager

All Implemented Interfaces:

org.littleshoot.proxy.MitmManager

public class ImpersonatingMitmManager
extends Object
implements org.littleshoot.proxy.MitmManager

An MitmManager that will create SSLEngines for clients that present impersonated certificates for upstream servers. The impersonated certificates will be signed using the certificate and private key specified in an rootCertificateSource. The impersonated server certificates will be created by the securityProviderTool based on the CertificateInfo returned by the certificateInfoGenerator.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	ImpersonatingMitmManager.Builder A Builder for ImpersonatingMitmManagers.

Constructor Summary

Constructors

Constructor and Description

ImpersonatingMitmManager(CertificateAndKeySource rootCertificateSource, KeyGenerator serverKeyGenerator, String serverMessageDigest, TrustSource trustSource, int sslContextCacheConcurrencyLevel, long cacheExpirationIntervalMs, SecurityProviderTool securityProviderTool, CertificateInfoGenerator certificateInfoGenerator, Collection<String> serverCipherSuites, Collection<String> clientCipherSuites) Creates a new ImpersonatingMitmManager.

Method Summary

Modifier and Type	Method and Description
static ImpersonatingMitmManager.Builder	builder() Convenience method to return a new ImpersonatingMitmManager.Builder instance default default values: a RootCertificateGenerator that dynamically generates an RSA root certificate and RSA server certificates.
static ImpersonatingMitmManager.Builder	builderWithECC() Convenience method to return a new ImpersonatingMitmManager.Builder instance that will dynamically create EC root certificates and EC server certificates, but otherwise uses default values.
SSLEngine	clientSslEngineFor(io.netty.handler.codec.http.HttpRequest httpRequest, SSLSession sslSession)
CertificateGenerationStatistics	getStatistics() Returns basic certificate generation statistics for this MitmManager.
SSLEngine	serverSslEngine()
SSLEngine	serverSslEngine(String peerHost, int peerPort)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ImpersonatingMitmManager

public ImpersonatingMitmManager(CertificateAndKeySource rootCertificateSource,
                                KeyGenerator serverKeyGenerator,
                                String serverMessageDigest,
                                TrustSource trustSource,
                                int sslContextCacheConcurrencyLevel,
                                long cacheExpirationIntervalMs,
                                SecurityProviderTool securityProviderTool,
                                CertificateInfoGenerator certificateInfoGenerator,
                                Collection<String> serverCipherSuites,
                                Collection<String> clientCipherSuites)

Creates a new ImpersonatingMitmManager. In general, use ImpersonatingMitmManager.Builder to construct new instances.

Method Detail

serverSslEngine

public SSLEngine serverSslEngine()

Specified by:

serverSslEngine in interface org.littleshoot.proxy.MitmManager

serverSslEngine

public SSLEngine serverSslEngine(String peerHost,
                                 int peerPort)

Specified by:

serverSslEngine in interface org.littleshoot.proxy.MitmManager

clientSslEngineFor

public SSLEngine clientSslEngineFor(io.netty.handler.codec.http.HttpRequest httpRequest,
                                    SSLSession sslSession)

Specified by:

clientSslEngineFor in interface org.littleshoot.proxy.MitmManager

getStatistics

public CertificateGenerationStatistics getStatistics()

Returns basic certificate generation statistics for this MitmManager.

builder

public static ImpersonatingMitmManager.Builder builder()

Convenience method to return a new ImpersonatingMitmManager.Builder instance default default values: a RootCertificateGenerator that dynamically generates an RSA root certificate and RSA server certificates.

builderWithECC

public static ImpersonatingMitmManager.Builder builderWithECC()

Convenience method to return a new ImpersonatingMitmManager.Builder instance that will dynamically create EC root certificates and EC server certificates, but otherwise uses default values.