Added wiki images & SSLv3 conditional support

Author: ExplodingBottle

custom_files/wuproxy_release/jmagicproxy.cfg

@@ -1,15 +1,16 @@
 #JMagicProxy Configuration File
-#Sun Feb 19 19:20:41 CET 2023
+#Tue Aug 29 10:42:30 CEST 2023
 proxy.ssl.keystoretype=pkcs12
 proxy.plugins=io.github.explodingbottle.jmagicproxy.implementation.WUProxy;io.github.explodingbottle.jmagicproxy.implementation.BasicProxy
 proxy.ssl.keystorepass=WindowsUpdate
 proxy.ssl.warn.algorithms=true
 proxy.ssl.keystorepath=certs/updks.p12
 proxy.server.port=8087
 proxy.logging.logfile=log&$LNUM$.txt
+proxy.ssl.enable.sslv3=true
 proxy.ssl.sortmode=INCLUDE
+proxy.ssl.sortlist=windowsupdate.microsoft.com;*.windowsupdate.microsoft.com;update.microsoft.com;*.update.microsoft.com;*.windowsupdate.com;download.windowsupdate.com;download.microsoft.com;*.download.windowsupdate.com;go.microsoft.com;*.one.microsoft.com
 proxy.plugins.wuproxy.redirwuclient=true
-proxy.ssl.sortlist=windowsupdate.microsoft.com;*.windowsupdate.microsoft.com;*.update.microsoft.com;*.windowsupdate.com;download.windowsupdate.com;download.microsoft.com;*.download.windowsupdate.com;go.microsoft.com
 proxy.plugin.wuproxy.redirectjs=content/redirect.js
 proxy.ssl.scan.startingport=9784
 proxy.logging.logsfolder=logs

readme.md

@@ -29,6 +29,7 @@ This project requires ExplodingAULib for recompiling.
    | *proxy.ssl.sortmode*				| Represents the sorting mode used to determine if a direct SSL connection must be established or instead if the Proxy must handle it. **NONE** means that every SSL requests will be handled by the proxy. **INCLUDE** means that only listed requests will be handled by the proxy and **EXCLUDE** means that only listed requests will be sent through a tunel directly. |
    | *proxy.ssl.sortlist*						| A list of requests splited with semi-colons that will be used with the sort mode. \* can be used to mean everything. An example could be \*.google.com;\*.microsoft.com |
    | *proxy.plugin.wuproxy.redirwuclient*			| A setting specific for WUProxy: Defines if we must simulate an older version of the Windows Update client in order to allow Windows XP to update |
+   | *proxy.ssl.enable.sslv3*			| Chooses to enable support of SSLv3 or not (only applicable if SSL is already enabled). |
 3) **Known issues**
 
    - A lot of exceptions can be thrown in the console.

src/io/github/explodingbottle/jmagicproxy/ProxyMain.java

@@ -169,6 +169,9 @@ public static void main(String[] args) {
 		pluginsManager.loadPlugins();
 		if (propsProvider.getAsBoolean(PropertyKey.PROXY_SSL_ENABLED)) {
 			mainLogger.log(LoggingLevel.INFO, "SSL is enabled, proceeding to SSL setup.");
+			if (propsProvider.getAsBoolean(PropertyKey.PROXY_SSL_ENABLE_SSLV3)) {
+				mainLogger.log(LoggingLevel.INFO, "SSLv3 will be allowed for every SSL connections.");
+			}
 			mainLogger.log(LoggingLevel.WARN,
 					"Please note that every disabled protocols has been enabled again only during the use of this program.");
 			sslObjectsProvider = new SSLObjectsProvider(

src/io/github/explodingbottle/jmagicproxy/properties/PropertyKey.java

@@ -39,7 +39,8 @@ public enum PropertyKey {
 	PROXY_SSL_SORT_MODE("proxy.ssl.sortmode", "NONE", String.class),
 	PROXY_SSL_SORT_LIST("proxy.ssl.sortlist", "*", String.class),
 	WUPROXY_REDIRECT_WUCLIENT("proxy.plugins.wuproxy.redirwuclient", false, Boolean.class),
-	PROXY_SSL_SCAN_STARTING_PORT("proxy.ssl.scan.startingport", 9784, Integer.class);
+	PROXY_SSL_SCAN_STARTING_PORT("proxy.ssl.scan.startingport", 9784, Integer.class),
+	PROXY_SSL_ENABLE_SSLV3("proxy.ssl.enable.sslv3", false, Boolean.class);
 
 	private String propKey;
 	private Object defaultVal;

src/io/github/explodingbottle/jmagicproxy/proxy/ssl/SSLCommunicationServer.java

@@ -116,6 +116,20 @@ public Integer prepareServerSocket() {
 			try {
 				server = (SSLServerSocket) obProv.getFactoryServer().createServerSocket(testPort, 0,
 						InetAddress.getLoopbackAddress());
+				if (ProxyMain.getPropertiesProvider().getAsBoolean(PropertyKey.PROXY_SSL_ENABLE_SSLV3)) {
+					boolean canEnableSSLv3 = false;
+					for (String protocol : server.getSupportedProtocols()) {
+						if (protocol.equals("SSLv3")) {
+							canEnableSSLv3 = true;
+							break;
+						}
+					}
+					if (canEnableSSLv3) {
+						server.setEnabledProtocols(server.getSupportedProtocols());
+					} else {
+						logger.log(LoggingLevel.WARN, "Failed to enable SSLv3 because not a supported protocol.");
+					}
+				}
 			} catch (BindException e) {
 				testPort++;
 			} catch (IOException e) {