[TS-2956] Add ssl_pre_handshake hook for better plugin access to SSL handling and allow for combination of blind tunnel and tunnel proxying

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 5.2.0
• Component/s: Core, Plugins, SSL
• Assignee: Susan Hinrichs
• Reporter: Susan Hinrichs
• Created: 24/Jul/14 18:14
• Updated: 17/Jan/15 02:02
• Resolved: 06/Nov/14 20:41

Description

Organizations that want to do more extensive SSL processing than is allowed by the core should be able to write a plugin. To support such plugins, the core needs to allow for the plugin to gain access after the TCP connection has completed but before the SSL Accept has completed.

One feature that a plug in may want to implement is the ability to determine that some SSL connections should be fully proxied and others should be blind tunneled. To date, this is a global decision. Either all tunnels are proxied by ATS or all are blind tunneled.

Probably should have been two issues, but the implementations are intertwined.

Issue Links

• is related to: TS-3006 Augment SNI callback processing