浏览需 SSL 认证的网站，如何把一些这类https的网站加入到安全名单中？比如 gmail, DRL 之类的网站，也就是不出现下面那图的提示。sidki 规则中又有没特定的规则文件对此进行设定的？
浏览 https 类网站问题
Moderator: cre
Forum rules
- 软件自带帮助是最好的入门教程，请仔细阅读；在您掌握最基本知识前，我们没法帮助您
- 提问前请先查阅软件帮助文件和论坛相关讨论
- 查阅软件帮助和论坛相关讨论即可解决的问题帖将直接删除，以免浪费他人时间
- 请学会如何提问，尽量将问题描述清楚，不明确的提问将被直接删除
浏览 https 类网站问题
睡之前再发个帖子询问下，本来想自己研究的；可该去开睡，也没时间了
浏览需 SSL 认证的网站，如何把一些这类https的网站加入到安全名单中？比如 gmail, DRL 之类的网站，也就是不出现下面那图的提示。sidki 规则中又有没特定的规则文件对此进行设定的？
浏览需 SSL 认证的网站，如何把一些这类https的网站加入到安全名单中？比如 gmail, DRL 之类的网站，也就是不出现下面那图的提示。sidki 规则中又有没特定的规则文件对此进行设定的？
- Attachments
-
- Snap1.gif (11.44 KiB) Viewed 7684 times
Re: 浏览 https 类网站问题
sidki的规则我没用，不知道是否有相应的文件。但在他的帮助里提到过的，因为https的地址一般是带port的，如
gmail.google.com:443/，这样的，所以你要在bypass里写入
另外要说的是，gmail里是有广告的，所以要过滤https的gmail，直接bypass上面那个地址不行的（因为我过滤gmail的广告是用的url kill，bypass了整个地址就过滤不了了），如果用文本替换的方式，我倒是没试过
gmail.google.com:443/，这样的，所以你要在bypass里写入
注意有冒号，这是通用方法。好像还提到过half-ssl，这个我没仔细看，LZ可以研究一下。gmail.google.com:
另外要说的是，gmail里是有广告的，所以要过滤https的gmail，直接bypass上面那个地址不行的（因为我过滤gmail的广告是用的url kill，bypass了整个地址就过滤不了了），如果用文本替换的方式，我倒是没试过
-
prox_starter
- Posts: 2
- Joined: Mar 31 2008, 18:21
Re: 浏览 https 类网站问题
使用的是firefox FoxyProxy扩展（推荐一下，我用过的最好的fx代理扩展,可以设置多代理软件,例如同时添加prox、tor,URLs模板支持方便自动对应代理使用)
我使用https 也有这个问题 原先的版本是从http://www.geocities.com/sidki3003/prox-ssl.html下载使用的 以为是SSL文件版本的问题 又从 http://www.slproweb.com/products/Win32OpenSSL.html 下载了最新Win32 OpenSSL v0.9.8g 解包了dll文后 在prox选项里启动时 提示信息大概为dll功能不能完整支持 编译算法有差异之类的
现在对https不启用 用起来也设什么问题 要是高手能解决这个问题让人期待
我使用https 也有这个问题 原先的版本是从http://www.geocities.com/sidki3003/prox-ssl.html下载使用的 以为是SSL文件版本的问题 又从 http://www.slproweb.com/products/Win32OpenSSL.html 下载了最新Win32 OpenSSL v0.9.8g 解包了dll文后 在prox选项里启动时 提示信息大概为dll功能不能完整支持 编译算法有差异之类的
现在对https不启用 用起来也设什么问题 要是高手能解决这个问题让人期待
-
prox_starter
- Posts: 2
- Joined: Mar 31 2008, 18:21
Re: 浏览 https 类网站问题
如果你用sidki的规则，看看Config_Control.txt里，启用half-SSL即可解决
2.2 Use Half-SSL (off)
...............................................................................
If active, secure links (https://) get redirected or converted to a Proxomitron
URL command (http://https..).
Pro: You may save some time because Proxomitron doesn't need to re-encrypt
the document after filtering - and the browser doesn't need to decrypt
it.
You don't get a warning message in Mozilla and Opera, saying that
Proxomitron's certificate doesn't match the site in question.
Contra: The browser is completely unaware that it is dealing with a secure
page. All responsibility goes to Proxomitron. You may not feel
comfortable with this fact.
This option requires a URL-based Proxomitron command.
Do *not* check "Disable URL-based Proxomitron commands", under
"Config -> Access" in Proxomitron's main window.
Proxomitron *must* have access to the SSL DLLs. The browser's HTTPS proxy
setting will not matter when this technique is in effect.
More info:
The "Installation" chapter in the ReadMe.
Scott R. Lemmon's thoughts in Proxomitron's ReadMe.
2.2 Use Half-SSL (off)
...............................................................................
If active, secure links (https://) get redirected or converted to a Proxomitron
URL command (http://https..).
Pro: You may save some time because Proxomitron doesn't need to re-encrypt
the document after filtering - and the browser doesn't need to decrypt
it.
You don't get a warning message in Mozilla and Opera, saying that
Proxomitron's certificate doesn't match the site in question.
Contra: The browser is completely unaware that it is dealing with a secure
page. All responsibility goes to Proxomitron. You may not feel
comfortable with this fact.
This option requires a URL-based Proxomitron command.
Do *not* check "Disable URL-based Proxomitron commands", under
"Config -> Access" in Proxomitron's main window.
Proxomitron *must* have access to the SSL DLLs. The browser's HTTPS proxy
setting will not matter when this technique is in effect.
More info:
The "Installation" chapter in the ReadMe.
Scott R. Lemmon's thoughts in Proxomitron's ReadMe.