simple-tls

simple-tls is a plugin for shadowsocks that adds support for the simplest tls, which encrypts your traffic completely, thereby giving you an act of shady business, such as: buying drugs, ordering murders, threats, the most vehement, propaganda not accepted by the authorities and much, much more. There are many more, and the list goes on and on.

■ Parameters □

● SIP003 Android mode ○

Parameter: Listening address of the client.

◇ Listening address of the server ◇

|-simple-tls |client|-->|simple-tls client|--TLS1.3-->|simple-tls server|-->|final destination| |-tls

♤ Client destination address ♤

Server destination address # General parameters -b line [Host:Port] Listener address. -d string [Host:Port] Destination address. -auth string Authentication password. (Optional. Client and server must be the same. Only used to filter scanning traffic). # client-side parameters # e.g. simple-tls -b 127.0.0.1:1080 -d your_server_ip:1080 -n your.server.name -mux int Maximum number of multiplexed connections per TCP connection. (default 0 disables mux) -n server certificate name string. -no-verify The client will not verify the server certificate. -ca string Load the PEM CA certificate file. e.g. -ca . /path/to/my.ca.cert -cca string Load a base64-encoded PEM CA certificate (for example, base64 -w 0 . /my.cert) from a base64-encoded PEM CA certificate (for example, base64 -w 0 . for example, -cca VkRJW... .4eGdFbz0K== # server-side parameters # e.g. simple-tls -b 0.0.0.0:1080 -d 127.0.0.1:12345 -s -key /path/to/your/key -cert /path/to/your/cert # -cert and -key can be left blank to generate a temporary certificate. The alternate subject name of the certificate is taken from the `-n` parameter. # e.g. simple-tls -b 0.0.0.0:1080 -d 127.0.0.1:12345 -s -n my.test.domain -s Runs as server part. -certification string Path to the PEM certificate. -key string Path to the PEM key. # Other parameters -cpu int Maximum number of processors used. -fast-open Enable TCP fast opening, only supported for Linux 4.11+ kernel. -t int Idle timeout, in seconds (default is 300). # commands -gen-cert Quickly generate an ECC certificate with an alternate subject name `-n such as simple-tls -gen-cert -n my.test.domain -v Show current program version SIP003 mode The SIP003 plug-in protocol is supported. Take shadowsocks-libev as an example: ss-server -c config.json --plugin simple-tls --plugin-opts "s;key=/path/to/your/key;cert=/path/to/your/cert" ss-local -c config.json --plugin simple-tls --plugin-opts "n=your.server.certificates. dnsname" Android simple-tls-android is a GUI plugin for shadows-android, first you need to download shadows-tls-android. simple-tls-android is also open source software, the source code is on the website.simple-tls is a GUI plugin for shadows-android. First you need to download and install shadowsocks-android. simple-tls is probably the simplest TLS plugin. It can: Protect and mask your connections with true TLS1.3. Easy to run as a SIP003 plugin and work on the Android platform. Send random data packets at the appropriate time. This can change the timing characteristics of data packets in a single connection, which can protect you from time traffic analysis. (optional, experimental)

Licensing: https://spdx.org/licenses/GPL-3.0-only.html Open source code: https://github.com/IrineSistiana/simple-tls List of all changes: https://github.com/IrineSistiana/simple-tls/releases If you want to add/suggest a change, or just discuss and ask questions about glaring bugs/defects or anything else. I recommend to discuss and ask all this here: https://github.com/IrineSistiana/simple-tls/issues IzzyOnDroid: https://f-droid.org/app/com.github.IrineSistiana.plugin.simple_tls_android Official IzzyOnDroid repository: https://apt.izzysoft.de/fdroid/repo?fingerprint=3BF0D6ABFEAE2F401707B6D966BE743BF0EEE49C2561B9BA39073711F628937A