Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

net::proxy::connector::ssl(3pm) [debian man page]

Net::Proxy::Connector::ssl(3pm) 			User Contributed Perl Documentation			   Net::Proxy::Connector::ssl(3pm)

NAME
Net::Proxy::Connector::ssl - SSL Net::Proxy connector DESCRIPTION
"Net::Proxy::Connecter::ssl" is a "Net::Proxy::Connector" that can manage SSL connections (thanks to "IO::Socket::SSL"). By default, this connector creates SSL sockets. You will need to subclass it to create "smarter" connectors than can upgrade their connections to SSL. In addition to the options listed below, this connector accepts all "SSL_..." options to "IO::Socket::SSL". They are transparently passed through to the appropriate "IO::Socket::SSL" methods when needed. CONNECTOR OPTIONS
The connector accept the following options: "in" o host The listening address. If not given, the default is "localhost". o port The listening port. o start_cleartext If true, the connection will start in cleartext. It is possible to upgrade a socket to using SSL with the "upgrade_SSL()" method. "out" o host The listening address. If not given, the default is "localhost". o port The listening port. o start_cleartext If true, the connection will start in cleartext. It is possible to upgrade a socket to using SSL with the "upgrade_SSL()" method. METHODS
The "Net::Proxy::Connector::ssl" connector has an extra method: upgrade_SSL( $sock ) This method will upgrade a cleartext socket to SSL. If the socket is already in SSL, it will "carp()". CREATING A SELF-SIGNED CERTIFICATE I tend to forget this information, and the openssl documentation doesn't make this any clearer, so here are the most basic commands needed to create your own self-signed certificate (courtesy David Morel): $ openssl genrsa -out key.pem 1024 $ openssl req -new -key key.pem -x509 -out cert.pem -days 365 A certificate is required is you want to run a SSL server or a proxy with a "Net::Proxy::Connector::ssl" as its "in" connector. Once the key and certificate have been created, you can use them in your parameter list to "Net::Proxy->new()" (they are passed through to "IO::Socket::SSL"): Net::Proxy->new( { in => { host => '0.0.0.0', port => 443, SSL_key_file => 'key.pem', SSL_cert_file => 'cert.pem', }, out => { type => 'tcp', port => '80' } } ); AUTHOR
Philippe 'BooK' Bruhat, "<book@cpan.org>". COPYRIGHT
Copyright 2006 Philippe 'BooK' Bruhat, All Rights Reserved. LICENSE
This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.10.1 2009-10-18 Net::Proxy::Connector::ssl(3pm)

Check Out this Related Man Page

Net::Proxy::Connector::dual(3pm)			User Contributed Perl Documentation			  Net::Proxy::Connector::dual(3pm)

NAME
Net::Proxy::Connector::dual - Y-shaped Net::Proxy connector DESCRIPTION
"Net::Proxy::Connecter::dual" is a "Net::Proxy::Connector" that can forward the connection to two distinct services, based on the client connection, before any data is exchanged. CONNECTOR OPTIONS
This connector can only work as an "in" connector. The "server_first" and "client_first" options are required: they are hashrefs containing the options necessary to create two "out" "Net::Proxy::Connector" objects that will be used to connect to the requested service. The "Net::Proxy::Connector::dual" object decides between the two services by waiting during a short timeout. If the client sends some data directly, then it is connected via the "client_first" connector. Otherwise, at the end of the timeout, it is connected via the "server_first" connector. o host The hostname on which the connector will listen for client connections. Default is "localhost". o port The port on which the connector will listen for client connections. o server_first Typically an "out" connector to a SSH server or any service that sends a banner line. o client_first Typically an "out" connectrot to a web server or SSL server. o timeout The timeout in seconds (can be decimal) to make a decision. Default is 1 second. AUTHOR
Philippe 'BooK' Bruhat, "<book@cpan.org>". ACKNOWLEDGMENTS
This module is based on a script named sslh, which I wrote with Frederic Ple "<sslh@wattoo.org>" (who had the original insight about the fact that not all servers speak first on the wire). Frederic wrote a C program, while I wrote a Perl script (based on my experience with connect-tunnel). Now that "Net::Proxy" is available, I've ported the Perl script to use it. COPYRIGHT
Copyright 2006 Philippe 'BooK' Bruhat, All Rights Reserved. LICENSE
This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.10.1 2009-10-18 Net::Proxy::Connector::dual(3pm)
Man Page