phus/goagent — pull request #11 by madeye (2012-02-14 06:31:13+00:00)
Title: Use SSLv3 Extension `subjectAltName` to work around the issues with redsocks

When using transparent proxy like redsocks, it's difficult to generate correct certificates in goagent. But thanks to SSLv3 extension `subjectAltName`, one workaround is to provide predefined alternative DNS name in fake certificates.

Of course, it's only a workaround and cannot work perfectly for all sites and apps. But at least, Twitter and Facebook works without problems now on Android.

Furthermore, one pre-generated cert with all blocked sites' URL can help goagent to improve performance. And it also means a lot for porting goagent to platforms lacking native python runtime.