mirror of
https://github.com/therootcompany/sclient
synced 2024-11-16 17:09:00 +00:00
Compare commits
No commits in common. "v1.5.0" and "master" have entirely different histories.
@ -3,34 +3,25 @@ before:
|
|||||||
- go mod download
|
- go mod download
|
||||||
- go generate ./...
|
- go generate ./...
|
||||||
builds:
|
builds:
|
||||||
- main: ./cmd/sclient/
|
- main: ./cmd/sclient/main.go
|
||||||
env:
|
env:
|
||||||
- CGO_ENABLED=0
|
- CGO_ENABLED=0
|
||||||
goos:
|
goos:
|
||||||
- darwin
|
|
||||||
- linux
|
- linux
|
||||||
- freebsd
|
|
||||||
- windows
|
- windows
|
||||||
- js
|
- darwin
|
||||||
goarch:
|
goarch:
|
||||||
|
- 386
|
||||||
- amd64
|
- amd64
|
||||||
- arm
|
- arm
|
||||||
- arm64
|
- arm64
|
||||||
- wasm
|
|
||||||
goarm:
|
goarm:
|
||||||
|
- 6
|
||||||
- 7
|
- 7
|
||||||
goamd64:
|
|
||||||
- v2
|
|
||||||
ignore:
|
|
||||||
- goos: windows
|
|
||||||
goarch: 386
|
|
||||||
- goos: windows
|
|
||||||
goarm: 6
|
|
||||||
- goos: windows
|
|
||||||
goarm: 7
|
|
||||||
archives:
|
archives:
|
||||||
- id: sclient-binary
|
- replacements:
|
||||||
format: tar.xz
|
386: i386
|
||||||
|
amd64: x86_64
|
||||||
format_overrides:
|
format_overrides:
|
||||||
- goos: windows
|
- goos: windows
|
||||||
format: zip
|
format: zip
|
||||||
|
@ -1,8 +0,0 @@
|
|||||||
{
|
|
||||||
"printWidth": 80,
|
|
||||||
"tabWidth": 2,
|
|
||||||
"singleQuote": false,
|
|
||||||
"bracketSpacing": true,
|
|
||||||
"proseWrap": "always",
|
|
||||||
"semi": true
|
|
||||||
}
|
|
38
README.md
38
README.md
@ -1,7 +1,6 @@
|
|||||||
# sclient
|
# sclient
|
||||||
|
|
||||||
Secure Client for exposing TLS (aka SSL) secured services as plain-text
|
Secure Client for exposing TLS (aka SSL) secured services as plain-text connections locally.
|
||||||
connections locally.
|
|
||||||
|
|
||||||
Also ideal for multiplexing a single port with multiple protocols using SNI.
|
Also ideal for multiplexing a single port with multiple protocols using SNI.
|
||||||
|
|
||||||
@ -31,8 +30,7 @@ cURL
|
|||||||
curl http://localhost:3000 -H 'Host: whatever.com'
|
curl http://localhost:3000 -H 'Host: whatever.com'
|
||||||
```
|
```
|
||||||
|
|
||||||
A poor man's (or Windows user's) makeshift replacement for `openssl s_client`,
|
A poor man's (or Windows user's) makeshift replacement for `openssl s_client`, `stunnel`, or `socat`.
|
||||||
`stunnel`, or `socat`.
|
|
||||||
|
|
||||||
# Table of Contents
|
# Table of Contents
|
||||||
|
|
||||||
@ -55,11 +53,9 @@ curl.exe -A MS https://webinstall.dev/sclient | powershell
|
|||||||
|
|
||||||
### Downloads
|
### Downloads
|
||||||
|
|
||||||
Check the [Github Releases](https://github.com/therootcompany/sclient/releases)
|
Check the [Github Releases](https://github.com/therootcompany/sclient/releases) for
|
||||||
for
|
|
||||||
|
|
||||||
- macOS (x64) Apple Silicon
|
- macOS (x64) Apple Silicon [coming soon](https://github.com/golang/go/issues/39782)
|
||||||
[coming soon](https://github.com/golang/go/issues/39782)
|
|
||||||
- Linux (x64, i386, arm64, arm6, arm7)
|
- Linux (x64, i386, arm64, arm6, arm7)
|
||||||
- Windows 10 (x64, i386)
|
- Windows 10 (x64, i386)
|
||||||
|
|
||||||
@ -70,11 +66,8 @@ sclient [flags] <remote> <local>
|
|||||||
```
|
```
|
||||||
|
|
||||||
- flags
|
- flags
|
||||||
- `-s`, `--silent` less verbose logging
|
- -k, --insecure ignore invalid TLS (SSL/HTTPS) certificates
|
||||||
- `-k`, `--insecure` ignore invalid TLS (SSL/HTTPS) certificates
|
- --servername <string> spoof SNI (to disable use IP as <remote> and do not use this option)
|
||||||
- `--servername <domain>` spoof SNI (to disable use IP as <remote> and do
|
|
||||||
not use this option)
|
|
||||||
- `--alpn <protocol-list>`
|
|
||||||
- remote
|
- remote
|
||||||
- must have servername (i.e. example.com)
|
- must have servername (i.e. example.com)
|
||||||
- port is optional (default is 443)
|
- port is optional (default is 443)
|
||||||
@ -82,17 +75,6 @@ sclient [flags] <remote> <local>
|
|||||||
- address is optional (default is localhost)
|
- address is optional (default is localhost)
|
||||||
- must have port (i.e. 3000)
|
- must have port (i.e. 3000)
|
||||||
|
|
||||||
-alpn string
|
|
||||||
acceptable protocols, ex: 'h2,http/1.1' 'http/1.1' (default) 'ssh' (default "http/1.1")
|
|
||||||
-insecure
|
|
||||||
ignore bad TLS/SSL/HTTPS certificates
|
|
||||||
-k alias for --insecure
|
|
||||||
-s alias of --silent
|
|
||||||
-servername string
|
|
||||||
specify a servername different from <remote> (to disable SNI use an IP as <remote> and do use this option)
|
|
||||||
-silent
|
|
||||||
less verbose output
|
|
||||||
|
|
||||||
# Examples
|
# Examples
|
||||||
|
|
||||||
Bridge between `telebit.cloud` and local port `3000`.
|
Bridge between `telebit.cloud` and local port `3000`.
|
||||||
@ -139,14 +121,10 @@ sclient --servername "Robert'); DROP TABLE Students;" -k example.com localhost:3
|
|||||||
sclient --servername "../../../.hidden/private.txt" -k example.com localhost:3000
|
sclient --servername "../../../.hidden/private.txt" -k example.com localhost:3000
|
||||||
```
|
```
|
||||||
|
|
||||||
# API
|
|
||||||
|
|
||||||
See [Go Docs](https://pkg.go.dev/github.com/therootcompany/sclient).
|
|
||||||
|
|
||||||
# Build from source
|
# Build from source
|
||||||
|
|
||||||
You'll need to install [Go](https://golang.org). See
|
You'll need to install [Go](https://golang.org).
|
||||||
[webinstall.dev/golang](https://webinstall.dev/golang) for install instructions.
|
See [webinstall.dev/golang](https://webinstall.dev/golang) for install instructions.
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
curl -sS https://webinstall.dev/golang | bash
|
curl -sS https://webinstall.dev/golang | bash
|
||||||
|
@ -40,30 +40,20 @@ func usage() {
|
|||||||
|
|
||||||
func main() {
|
func main() {
|
||||||
if len(os.Args) >= 2 {
|
if len(os.Args) >= 2 {
|
||||||
if os.Args[1] == "-V" || strings.TrimLeft(os.Args[1], "-") == "version" {
|
if "version" == strings.TrimLeft(os.Args[1], "-") {
|
||||||
fmt.Printf("%s\n", ver())
|
fmt.Printf("%s\n", ver())
|
||||||
os.Exit(0)
|
os.Exit(0)
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
var alpnList string
|
|
||||||
var insecure bool
|
|
||||||
var servername string
|
|
||||||
var silent bool
|
|
||||||
|
|
||||||
flag.Usage = usage
|
flag.Usage = usage
|
||||||
|
insecure := flag.Bool("k", false, "alias for --insecure")
|
||||||
flag.StringVar(&alpnList, "alpn", "", "acceptable protocols, ex: 'h2,http/1.1' 'http/1.1' 'ssh'")
|
silent := flag.Bool("s", false, "alias of --silent")
|
||||||
flag.BoolVar(&insecure, "k", false, "alias for --insecure")
|
servername := flag.String("servername", "", "specify a servername different from <remote> (to disable SNI use an IP as <remote> and do use this option)")
|
||||||
flag.BoolVar(&silent, "s", false, "alias of --silent")
|
flag.BoolVar(insecure, "insecure", false, "ignore bad TLS/SSL/HTTPS certificates")
|
||||||
flag.StringVar(&servername, "servername", "", "specify a servername different from <remote> (to disable SNI use an IP as <remote> and do not use this option)")
|
flag.BoolVar(silent, "silent", false, "less verbose output")
|
||||||
flag.BoolVar(&insecure, "insecure", false, "ignore bad TLS/SSL/HTTPS certificates")
|
|
||||||
flag.BoolVar(&silent, "silent", false, "less verbose output")
|
|
||||||
|
|
||||||
flag.Parse()
|
flag.Parse()
|
||||||
|
|
||||||
alpns := parseOptionList(alpnList)
|
|
||||||
remotestr := flag.Arg(0)
|
remotestr := flag.Arg(0)
|
||||||
localstr := flag.Arg(1)
|
localstr := flag.Arg(1)
|
||||||
|
|
||||||
@ -81,10 +71,9 @@ func main() {
|
|||||||
sclient := &sclient.Tunnel{
|
sclient := &sclient.Tunnel{
|
||||||
RemotePort: 443,
|
RemotePort: 443,
|
||||||
LocalAddress: "localhost",
|
LocalAddress: "localhost",
|
||||||
InsecureSkipVerify: insecure,
|
InsecureSkipVerify: *insecure,
|
||||||
ServerName: servername,
|
ServerName: *servername,
|
||||||
Silent: silent,
|
Silent: *silent,
|
||||||
NextProtos: alpns,
|
|
||||||
}
|
}
|
||||||
|
|
||||||
remote := strings.Split(remotestr, ":")
|
remote := strings.Split(remotestr, ":")
|
||||||
@ -135,18 +124,3 @@ func main() {
|
|||||||
//os.Exit(6)
|
//os.Exit(6)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
// parsers "a,b,c" "a b c" and "a, b, c" all the same
|
|
||||||
func parseOptionList(optionList string) []string {
|
|
||||||
optionList = strings.TrimSpace(optionList)
|
|
||||||
|
|
||||||
if len(optionList) == 0 {
|
|
||||||
return nil
|
|
||||||
}
|
|
||||||
|
|
||||||
options := []string{}
|
|
||||||
optionList = strings.ReplaceAll(optionList, ",", " ")
|
|
||||||
options = strings.Fields(optionList)
|
|
||||||
|
|
||||||
return options
|
|
||||||
}
|
|
||||||
|
@ -17,7 +17,6 @@ type Tunnel struct {
|
|||||||
LocalAddress string
|
LocalAddress string
|
||||||
LocalPort int
|
LocalPort int
|
||||||
InsecureSkipVerify bool
|
InsecureSkipVerify bool
|
||||||
NextProtos []string
|
|
||||||
ServerName string
|
ServerName string
|
||||||
Silent bool
|
Silent bool
|
||||||
}
|
}
|
||||||
@ -30,7 +29,6 @@ func (t *Tunnel) DialAndListen() error {
|
|||||||
&tls.Config{
|
&tls.Config{
|
||||||
ServerName: t.ServerName,
|
ServerName: t.ServerName,
|
||||||
InsecureSkipVerify: t.InsecureSkipVerify,
|
InsecureSkipVerify: t.InsecureSkipVerify,
|
||||||
NextProtos: t.NextProtos,
|
|
||||||
})
|
})
|
||||||
|
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user