Hi,
I'm trying to implement a TLS wrapping proxy to "secure" a TLS incapable web service,
so the intended information flow is like this:
client -(TLS encrypted data)-> proxy -(plain data)-> server.local:8080
server.local -(plain data)-> proxy -(TLS encrypted data)-> client
In Wireshark I can see that "server.local" sends the response as expected to the proxy,
but I'm unable to get the proxy to return the data as expected to the client.
The proxy does not always return the whole response from "server.local".
Requesting small entities (10000 byte >= response size) seems to work (success.log).
Whereas bigger entities (~16000 byte <= response size) fail (error.log).
My proxy config:
[Proxy]
RxBuffSize=65536
MaxClients=999
ServerHeader=Foo Bar Baz
LocalAddr=0.0.0.0
DebugLevel=DebugAll
TarSecLevel=sslSecLevel128bits
CertVerTar=CertVerWinStore
SslReportChain=True
[Source1]
AuthForceSsl=True
AuthSslCmd=True
BindIpAddr=0.0.0.0
BindNonPort=80
BindSslPort=443
Descr=Bar
Enabled=True
Hosts=foo.local
HostTag=FooBarBaz
CertChallange=ChallNone
CertSignDigest=Digest_sha256
CerSupplierProto=SuppProtoNone
CliCertMethod=sslCliCertNone
SslLoadSource=CertWinStoreMachine
SslSrvSecurity=sslSrvSecHigh
[Target1]
Descr=Foo
HostEnabled=True
HostTag=FooBarBaz
IdleTimeout=60
;SrcPath=
TarHost=localhost
TarPort=8080
TarSsl=False
UpdateHtml=True
UpdateHttp=True
Is there anything obvious I'm missing?
Used ICS version:
ICS V9.2 - Part 6, Revision 50
error.log
success.log