andy/pilens
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Docs + guide for Mode B HTTPS interception; record Pi 5 verification

Browse Source 
Updated README/architecture/security/limitations/testing/api/CHANGELOG and the
LaTeX user guide (now 14pp) with the Certificates and HTTP Explorer screens.
0 called Go vulns, npm audit clean.
This commit is contained in:
Andy Dixon
2026-10-10 08:14:02 +01:00
parent 5dbf85f84e
commit f3cfa9ccf1
12 changed files with 129 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+11
View File
@@ -1,5 +1,16 @@
# Changelog
## 0.4.0 — 2026-10-10 (Phase 4: authorised HTTPS inspection, Mode B)
- Toggleable transparent HTTPS interception via mitmdump in a venv. Off by default.
- Own RSA-2048 CA generated in-app (`PiLens Interception CA`), downloadable public
cert with per-OS install guide + fingerprint; private key never leaves the box.
- nftables redirect accepts only dnat'd connections (never an open proxy); the
proxy's own upstream never loops.
- HTTP Explorer: transactions with headers and opt-in body viewers (JSON/text/hex/
image, sandboxed). Bodies off by default. Pinned/untrusting = reported errors.
- Verified on the Pi 5: a CA-trusting client's HTTPS decrypted (TLS 1.3), an
untrusting client honestly reported as a TLS failure.
All notable changes. Dates are when the work was done on the reference Pi 5.
## 0.3.1 — 2026-10-09