Constantine bec321d190 Fix DPI detection: skip GREASE cipher suite in ClientHello parsing ...

Instead of echoing the first cipher suite from ClientHello (which is
often a GREASE value like 0x5a5a), iterate the list and pick the first
real cipher suite. This is what real TLS servers do per RFC 8701.

Production data shows two client profiles:
- 87% send GREASE first, then 0x1301 (TLS_AES_128_GCM_SHA256)
- 13% send 0xc02b first (TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)

The fix correctly selects 0x1301 or 0xc02b respectively, matching
real server behavior. Fallback to 0x1301 if all suites are GREASE.

Add snapshot test with GREASE as first cipher suite.

2026-04-06 23:16:08 +03:00

..

testdata

Fix DPI detection: skip GREASE cipher suite in ClientHello parsing

2026-04-06 23:16:08 +03:00

bytes_pool.go

Formatting with gofumpt

2026-03-12 19:13:33 +01:00

client_side_fuzz_test.go

Formatting with gofumpt

2026-03-12 19:13:33 +01:00

client_side_snapshot_test.go

Integrate new fake package and doppel into proxy

2026-03-12 19:07:11 +01:00

client_side_test.go

Fix DPI detection: skip GREASE cipher suite in ClientHello parsing

2026-04-06 23:16:08 +03:00

client_side.go

Fix DPI detection: skip GREASE cipher suite in ClientHello parsing

2026-04-06 23:16:08 +03:00

init.go

ReadClientHello function

2026-03-12 19:07:10 +01:00

server_side_test.go

Fix DPI detection: skip GREASE cipher suite in ClientHello parsing

2026-04-06 23:16:08 +03:00

server_side.go

Add dynamic cert noise calibration for FakeTLS handshake

2026-03-26 23:38:58 +03:00

utils.go

Refactor TLS fragmenting

2026-04-01 14:01:24 +02:00