1
0
mirror of https://github.com/therootcompany/sclient synced 2024-11-16 17:09:00 +00:00

Compare commits

..

No commits in common. "v1.5.0" and "master" have entirely different histories.

5 changed files with 24 additions and 91 deletions

View File

@ -3,34 +3,25 @@ before:
- go mod download - go mod download
- go generate ./... - go generate ./...
builds: builds:
- main: ./cmd/sclient/ - main: ./cmd/sclient/main.go
env: env:
- CGO_ENABLED=0 - CGO_ENABLED=0
goos: goos:
- darwin
- linux - linux
- freebsd
- windows - windows
- js - darwin
goarch: goarch:
- 386
- amd64 - amd64
- arm - arm
- arm64 - arm64
- wasm
goarm: goarm:
- 6
- 7 - 7
goamd64:
- v2
ignore:
- goos: windows
goarch: 386
- goos: windows
goarm: 6
- goos: windows
goarm: 7
archives: archives:
- id: sclient-binary - replacements:
format: tar.xz 386: i386
amd64: x86_64
format_overrides: format_overrides:
- goos: windows - goos: windows
format: zip format: zip

View File

@ -1,8 +0,0 @@
{
"printWidth": 80,
"tabWidth": 2,
"singleQuote": false,
"bracketSpacing": true,
"proseWrap": "always",
"semi": true
}

View File

@ -1,7 +1,6 @@
# sclient # sclient
Secure Client for exposing TLS (aka SSL) secured services as plain-text Secure Client for exposing TLS (aka SSL) secured services as plain-text connections locally.
connections locally.
Also ideal for multiplexing a single port with multiple protocols using SNI. Also ideal for multiplexing a single port with multiple protocols using SNI.
@ -31,8 +30,7 @@ cURL
curl http://localhost:3000 -H 'Host: whatever.com' curl http://localhost:3000 -H 'Host: whatever.com'
``` ```
A poor man's (or Windows user's) makeshift replacement for `openssl s_client`, A poor man's (or Windows user's) makeshift replacement for `openssl s_client`, `stunnel`, or `socat`.
`stunnel`, or `socat`.
# Table of Contents # Table of Contents
@ -55,11 +53,9 @@ curl.exe -A MS https://webinstall.dev/sclient | powershell
### Downloads ### Downloads
Check the [Github Releases](https://github.com/therootcompany/sclient/releases) Check the [Github Releases](https://github.com/therootcompany/sclient/releases) for
for
- macOS (x64) Apple Silicon - macOS (x64) Apple Silicon [coming soon](https://github.com/golang/go/issues/39782)
[coming soon](https://github.com/golang/go/issues/39782)
- Linux (x64, i386, arm64, arm6, arm7) - Linux (x64, i386, arm64, arm6, arm7)
- Windows 10 (x64, i386) - Windows 10 (x64, i386)
@ -70,11 +66,8 @@ sclient [flags] <remote> <local>
``` ```
- flags - flags
- `-s`, `--silent` less verbose logging - -k, --insecure ignore invalid TLS (SSL/HTTPS) certificates
- `-k`, `--insecure` ignore invalid TLS (SSL/HTTPS) certificates - --servername <string> spoof SNI (to disable use IP as &lt;remote&gt; and do not use this option)
- `--servername <domain>` spoof SNI (to disable use IP as &lt;remote&gt; and do
not use this option)
- `--alpn <protocol-list>`
- remote - remote
- must have servername (i.e. example.com) - must have servername (i.e. example.com)
- port is optional (default is 443) - port is optional (default is 443)
@ -82,17 +75,6 @@ sclient [flags] <remote> <local>
- address is optional (default is localhost) - address is optional (default is localhost)
- must have port (i.e. 3000) - must have port (i.e. 3000)
-alpn string
acceptable protocols, ex: 'h2,http/1.1' 'http/1.1' (default) 'ssh' (default "http/1.1")
-insecure
ignore bad TLS/SSL/HTTPS certificates
-k alias for --insecure
-s alias of --silent
-servername string
specify a servername different from <remote> (to disable SNI use an IP as <remote> and do use this option)
-silent
less verbose output
# Examples # Examples
Bridge between `telebit.cloud` and local port `3000`. Bridge between `telebit.cloud` and local port `3000`.
@ -139,14 +121,10 @@ sclient --servername "Robert'); DROP TABLE Students;" -k example.com localhost:3
sclient --servername "../../../.hidden/private.txt" -k example.com localhost:3000 sclient --servername "../../../.hidden/private.txt" -k example.com localhost:3000
``` ```
# API
See [Go Docs](https://pkg.go.dev/github.com/therootcompany/sclient).
# Build from source # Build from source
You'll need to install [Go](https://golang.org). See You'll need to install [Go](https://golang.org).
[webinstall.dev/golang](https://webinstall.dev/golang) for install instructions. See [webinstall.dev/golang](https://webinstall.dev/golang) for install instructions.
```bash ```bash
curl -sS https://webinstall.dev/golang | bash curl -sS https://webinstall.dev/golang | bash

View File

@ -40,30 +40,20 @@ func usage() {
func main() { func main() {
if len(os.Args) >= 2 { if len(os.Args) >= 2 {
if os.Args[1] == "-V" || strings.TrimLeft(os.Args[1], "-") == "version" { if "version" == strings.TrimLeft(os.Args[1], "-") {
fmt.Printf("%s\n", ver()) fmt.Printf("%s\n", ver())
os.Exit(0) os.Exit(0)
return return
} }
} }
var alpnList string
var insecure bool
var servername string
var silent bool
flag.Usage = usage flag.Usage = usage
insecure := flag.Bool("k", false, "alias for --insecure")
flag.StringVar(&alpnList, "alpn", "", "acceptable protocols, ex: 'h2,http/1.1' 'http/1.1' 'ssh'") silent := flag.Bool("s", false, "alias of --silent")
flag.BoolVar(&insecure, "k", false, "alias for --insecure") servername := flag.String("servername", "", "specify a servername different from <remote> (to disable SNI use an IP as <remote> and do use this option)")
flag.BoolVar(&silent, "s", false, "alias of --silent") flag.BoolVar(insecure, "insecure", false, "ignore bad TLS/SSL/HTTPS certificates")
flag.StringVar(&servername, "servername", "", "specify a servername different from <remote> (to disable SNI use an IP as <remote> and do not use this option)") flag.BoolVar(silent, "silent", false, "less verbose output")
flag.BoolVar(&insecure, "insecure", false, "ignore bad TLS/SSL/HTTPS certificates")
flag.BoolVar(&silent, "silent", false, "less verbose output")
flag.Parse() flag.Parse()
alpns := parseOptionList(alpnList)
remotestr := flag.Arg(0) remotestr := flag.Arg(0)
localstr := flag.Arg(1) localstr := flag.Arg(1)
@ -81,10 +71,9 @@ func main() {
sclient := &sclient.Tunnel{ sclient := &sclient.Tunnel{
RemotePort: 443, RemotePort: 443,
LocalAddress: "localhost", LocalAddress: "localhost",
InsecureSkipVerify: insecure, InsecureSkipVerify: *insecure,
ServerName: servername, ServerName: *servername,
Silent: silent, Silent: *silent,
NextProtos: alpns,
} }
remote := strings.Split(remotestr, ":") remote := strings.Split(remotestr, ":")
@ -135,18 +124,3 @@ func main() {
//os.Exit(6) //os.Exit(6)
} }
} }
// parsers "a,b,c" "a b c" and "a, b, c" all the same
func parseOptionList(optionList string) []string {
optionList = strings.TrimSpace(optionList)
if len(optionList) == 0 {
return nil
}
options := []string{}
optionList = strings.ReplaceAll(optionList, ",", " ")
options = strings.Fields(optionList)
return options
}

View File

@ -17,7 +17,6 @@ type Tunnel struct {
LocalAddress string LocalAddress string
LocalPort int LocalPort int
InsecureSkipVerify bool InsecureSkipVerify bool
NextProtos []string
ServerName string ServerName string
Silent bool Silent bool
} }
@ -30,7 +29,6 @@ func (t *Tunnel) DialAndListen() error {
&tls.Config{ &tls.Config{
ServerName: t.ServerName, ServerName: t.ServerName,
InsecureSkipVerify: t.InsecureSkipVerify, InsecureSkipVerify: t.InsecureSkipVerify,
NextProtos: t.NextProtos,
}) })
if err != nil { if err != nil {