Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

impl no_auth #664

Open
wants to merge 6 commits into
base: master
Choose a base branch
from
Open

impl no_auth #664

wants to merge 6 commits into from

Conversation

itsabgr
Copy link

@itsabgr itsabgr commented Feb 6, 2023

Do no authentication and accept all when there is no password and MySQL is disabled

k4yt3x and others added 6 commits April 19, 2022 09:58
@k4yt3x @wongsyrone
using multi-stage build to reduce image size
24cebb8
@KujouRinka @wongsyrone
perf: improve Trojan header splicing perf
3398c6c
@Chigusa0w0 @wongsyrone
Add ACTIVE_DISCONNECT session state
816ef61
@Chigusa0w0 @wongsyrone
Add server-side active close mechanism
3275c8f 
This patch set fixes the behavior of Trojan not immediately attempting to close a frontend connection if the Trojan backend unexpectedly closed the connection.

In some cases, an attacker can trick the backend into closing the connection immediately after sending valid data with carefully constructed contents. For connections that are not relayed by Trojan, the attack can observe the closure of the connection immediately. However, in scenarios where Trojan is present, the connection will be kept even after the attacker receives the aforementioned data. This difference in behavior can be used to detect the presence of Trojan.

The behavioral difference does not result in the leak of confidential user data.
@wongsyrone
CI: windows: update openssl to 1.1.1o
3284d1a 
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
@itsabgr
impl no_auth
7860087
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
3 out of 4 committers have signed the CLA.

✅ KujouRinka
✅ wongsyrone
✅ Chigusa0w0
❌ itsabgr
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
6 participants
@itsabgr @CLAassistant @k4yt3x @KujouRinka @Chigusa0w0 @wongsyrone