AstroSkipper
Content Type
Profiles
Forums
Events
Posts posted by AstroSkipper
-
-
How to set up and use the TLS 1.3 proxy ProxyMII
- Unpack the archive and copy the folder ProxyMII to a location of your choice.
- Install the file CA.crt to Trusted Root Certification Authority under the account local computer manually. I use the certificate generated by ProxHTTPSProxy REV3e, provided in my release of ProxHTTPSProxy's PopMenu 3V1. Or use my contained ProxHTTPSProxy CA Certificate Installer and Uninstaller to do that automatically. If so, you have to overwrite the already existing CA.crt in ProxyMII's program folder by the one of my release.
- Enable the proxy settings of IE in the Internet Options -> LAN settings, i.e., check mark "Use a proxy server for your LAN", and click on Advanced. Go to the entry Secure and enter the Proxy address 127.0.0.1 and the port 8079.
- Update the file cacert.pem to have the most recent one by using my cacert Updater Fixed (Recreated).
- Start the proxy by executing the file ProxHTTPSProxy.exe.
- Ensure that your firewall doesn't block this proxy. Add it to your exclusions list or allow its connection.
- Do not forget to disable the proxy settings of IE when ProxyMII has been closed.
This short tutorial refers to the second and the latest release of @cmalex's ProxyMII. Now, if all steps above have been executed, it should actually work. Perform a test in your Internet Explorer on the websites of Qualys SSL Labs and BrowserLeaks. If you want to do further tests by using one of roytam1's browser editions, you have to import the certificate CA.crt in the browser's certificate storage additionally and change the browser's proxy settings, otherwise it won't work.
Kind regards, AstroSkipper
2 -
1 hour ago, NotHereToPlayGames said:
I work from a home office and so my home operating systems must adhere to the full extent of license agreements.
It is ILLEGAL for me to use POSReady updates.
I would go so far as to suggest it is ILLEGAL for any of your HOME PC's to be using POSReady updates.
But I highly doubt that Microsoft will send you to jail for "hacking" your otherwise legal XP.
Right! Definitely no one is interested in wether it is legal or not. And certainly not me!
POSReady updates are cool , and they work perfectly! I use them since 2014. Everything is fine, and most of it is good. 
BTW, no one is forced to use POSReady updates in their system. To each his own! 
Cheers, AstroSkipper
1 -
Maybe, the POSReady updates are necessary to use this proxy successfully when connecting to the internet by IE8.
But, I don't think they are a mandatory requirement for using this proxy in Windows XP generally 
, although my Windows XP Professional SP3 is fully updated including all existent POSReady updates. Therefore, it is just my personal opinion about mandatory requirements.
Cheers, AstroSkipper
0 -
Hi to all and especially to @cmalex and @XPerceniol, I think the problems, some users obviously have with the proxy ProxyMII, can probably be traced back to a misconfiguration. I will write a short tutorial on how to set up and use this proxy correctly. And hopefully, it should actually work properly then.
BTW, a proper configuration of ProxHTTPSProxy was already described by me in the first post of my proxy thread in the section Configuration. Just a reminder! Here is the link, once again:
https://msfn.org/board/topic/183352-proxhttpsproxy-and-httpsproxy-in-windows-xp-for-future-use/?do=findComment&comment=1213600
The only difference is that the proxy settings of ProxyMII have to be done manually.
Cheers, AstroSkipper
1 -
1 hour ago, mina7601 said:
Awesome! Hopefully you will keep me updated with this as well.
@mina7601, thanks for your reply and your interest! As I already wrote:
On 7/15/2022 at 2:20 PM, AstroSkipper said:I hadn't had much hope that this would happen. But, from now on, we definitely have a proxy with TLS 1.3 protocol support targeting Windows XP.
More details can be found in my thread:
I'll keep you informed.
Cheers, AstroSkipper
all further progress and information you'll find soon in my thread "ProxHTTPSProxy and HTTPSProxy in Windows XP for future use". But first, we need a final release of ProxMII, fulfilling all license agreements. When this release is available, I'll try to implement this proxy in my ProxHTTPSProxy's PopMenu, if possible. And, I do believe that this is possible, but it won't be as easy as it was in the case of ProxHTTPSProxy REV3e. Anyway, we will see.
.
Cheers, AstroSkipper
0 -
Hi @XPerceniol and @cmalex, here are two screenshots to demonstrate successful connections to Qualys SSL Labs and Google, established by the TLS 1.3 proxy ProxyMII, using the Internet Explorer 8:
Cheers, AstroSkipper
1 -
No problem here with IE8. The proxy ProxyMII works much better with websites in Internet Explorer 8 than ProxHTTPSProxy REV3e. The Microsoft Update website works, too. A search for updates was successfully completed. I tested the service on browserleaks.com, and the SSL Client Test of Qualys SSL Labs - Projects, both also lead to the expected results. TLS 1.3 in IE8. Perfect!
0 -
@cmalex, maybe, it could help you, in the case of ProxyMII, to take a look into @heinoganda's releases of ProxHTTPSProxy. He had documentated his releases very accurately, to fulfill the terms of the license agreements, presumably. He provided changelogs and all necessary documents, too.
You can find it in the section Versions and all downloadable releases in the section Downloads of my thread "ProxHTTPSProxy and HTTPSProxy in Windows XP for future use". I refer in particular to the releases ProxHTTPSProxy REV3d and REV3e. And here is the link:
@heinoganda provided his source code, too. Here is the link of ProxHTTPSProxy REV3e's source code:
https://www.mediafire.com/file/s9027bdxffodbna/cryptography-2.8-py3.4_openssl-1.1.1d.rar/file
And here is the link to my release of ProxHTTPSProxy's PopMenu 3V1 if you want to take a look into:
https://www.mediafire.com/file/h20kkuucurv2i2b/ProxHTTPSProxy_REV3e_PopMenu_3V1.7z/file
Cheers, AstroSkipper
1 -
2 hours ago, cmalex said:
I'll include Copying file from 3proxy sources. But will this be enough?
Also i'd used (and published) ProxyMII, Python, OpenSSL3(with my Win98 patch), cryptography, LibFFI, cffi - each with its own license agreement and publishing rules.
What files should be added and what changes should be made to the structure of the archives to fulfill the terms of the license agreements for each of the components used?
Do you think you'll be able to modify your release of ProxyMII and 3proxy to fulfill the terms of the license agreements? Your release is definitely great and valuable for all those who have to use Windows XP or, like me, want to. But first, thanks again for all your efforts and your explanations!
We definitely need you and your skills. We are glad to have you here in this forum. If I can help you, don't hesitate to ask me or our experts here at MSFN! The members in this forum help each other.
Kindest regards, AstroSkipper
1 -
Hi @cmalex, I could see that you've already removed your proxy download links. Please, explain what's wrong with these archives, and, what I can do for you.
As I already mentioned, I would like to implement your proxy ProxyMII in my ProxHTTPSProxy's PopMenu for more convenient use, with your permission and with credits to you, of course. The goal of all I do is to future-proof Windows XP, the OS I'll love forever. It's important to have a most recent TLS 1.3 proxy in Windows XP, easy to use, fully documentated, and as convenient as possible. That was the reason I provided ProxHTTPSProxy's PopMenu 3V1 for all interested people, and the reason for the call in this thread, of course. Your second release of ProxyMII is absolutely great! 
Kind regards, AstroSkipper
0 -
1 hour ago, Reino said:
@roytam1 Maybe I'm ignorant, but if, after having manually added an entry in about:config, I want to remove/delete it again... where's the delete-button? There isn't one in the context-menu that I see.
You simply have to reset that entry from context menu. If it is a self-created entry, it'll be deleted after refreshing the page or restarting the browser. If it is an entry that already existed and was changed by you, it will be set back to its default value. Anyway, there is no extra delete button.
5 -
4 hours ago, cmalex said:
And looks like i'd lost all licensing things from all used components (3proxy, openssl, python, ProxyMII). I'm removing all links.
What did you lose? Licensing things? Please let me know how I can help you, but first, explain exactly what you mean with "Licensing things".
4 hours ago, cmalex said:Can You please help get licenses in order?
I don't know what you mean by "helping to get licenses in order". Tell me in detail what I can do for you. Of course, I will help you as much as possible.
4 hours ago, cmalex said:What more files or links You need for it?
When you say "it", do you mean 3proxy? If so, I really don't know whether I need additional files or not. I would like to have an informative, detailed manual of 3proxy to understand how this proxy has to be installed correctly and how it works in detail.
And many thanks for the additional information referring to 3proxy.
Kind regards, AstroSkipper
0 -
16 hours ago, Mathwiz said:
And to make our strange language even more complicated, there's another use of the word "either:" to emphasize that a subsequent "or" is exclusive. For example:
... meaning, I'll have one of those choices, but not both.
Thank you for your further hint! Frankly, I already knew that. We learned that at school, "either...or..., neither...nor...". BTW, for being a mathematician you have to know the difference between "or" on the one hand, and "either...or..." on the other.
In my case I totally forgot the correct use of "either" in the meaning of "too". Therefore, I used it wrong in a few cases. And, to complete our examination, there is another use, too. (you see the English lesson was successful, Lol! 
). "Either of us" in the meaning of "one of us" or "both". I had a look in my "English Companion's Modern Grammar", and did a Google research, too. As I already said, I was initiated into the mysteries of the English language. And now, my life is a better one. 
Cheers, AstroSkipper
1 -
4 hours ago, cmalex said:
Greetings.
Sorry, my bad. Yes, there is must be three files in certs folder - 3proxy.key, 3proxy.pem, server.key. And You need to import 3proxy.pem.
Some info from author - https://3proxy.org/plugins/SSLPlugin/?l=EN
I can't find mail - how to prolong or change 3proxy.pem. Initially i got it from author release.
In my first variant - config that i had used this time. At launch 3proxy.exe reads 3proxy.cfg
>plugin .\plugins\SslPlugin.dll ssl_plugin - load plugin.
>nserver 192.168.1.1 - preffered DNS server
>nscache 16000 - DNS records live time
>ssl_certcache .\certs\ - folder to store certificates
>ssl_mitm - begin of ssl_plugin settings
>toggle_certstore - switch to cache or not certs in folder
>proxy -p3128 - listen at port 3128 as MITM proxy
>ssl_nomitm - end of ssl_plugin settings
>proxy -p3129 - listen at port 3129 as usual proxy
Second config add options to list preffered ciphers. Now - all possible.
>ssl_ciphers ALL:COMPLEMENTOFALL
And (as my hope) this fragment redirect from socks port 3127 to MITM port 3128.
>allow *
>parent 1000 connect+ 127.0.0.1 3128
>socks -p3127
I'd never used other 3proxy abilities...Best regards.
Thanks for this additional information! As I already mentioned, I never used 3proxy before. Therefore, I have to collect all necessary information to handle it properly. All of your information seems to be a bit more complicated than it was in the case of ProxHTTPSProxy. But, maybe, just due to my existent knowledge about ProxHTTPSProxy and the lack of knowledge about 3proxy. Good to know that a certificate has to be installed, too. Where do I have to import the certificate 3proxy.pem to? To Trusted Root Certification Authorities local computer or current user? And just for clarification. Are you sure that the certificate for importing is 3proxy.pem and not 3proxy.cer? Such a file can be downloaded here: https://3proxy.org/3proxy.cer The certificate ending of .pem are usually for generating the SSL certificates of websites in the folder certs as in the case of cacert.pem. Or means Code signing certificate it is needed for compiling this proxy? All of that is a bit confusing, the documentation in English is quite incomplete, and, frankly, not the best. ProxHTTPSProxy is able to generate a new CA certificate by itself if there is no such file. Maybe, 3proxy has a similar ability. Just a guess! Anyway, I'll test this proxy when I know enough about it and understand it better.
Kind regards, AstroSkipper
0 -
13 minutes ago, XPerceniol said:
Is this what you are referring to?
After a short research, I found the same site. There is a documentation available how to install it and so on. I already read the part referring to Windows XP. I'll test it as soon as I know enough about this proxy.
0 -
11 minutes ago, CIACIACIACIACIACIA said:
Off course these are great news but TLS 1.0 and TLS 1.1 are weakly supported.
I see that 3proxy is a very promising proxy program for windows xp users.
But TLS 1.0 and TLS 1.1 are supported, and therefore, all TLS protocols upcto TLS 1.3 are available in this new ProxHTTPSProxy. And that's fine with me. Never used 3proxy before, I'll test it as soon as possible. Do you have any experiences with this proxy?
1 -
@cmalex has recompiled the proxy ProxyMII, and it is now based on openssl 3.0.5 and cryptography 3.4.8. I've tested this new release in New Moon 28.10.6a1 (:2022-07-06) and here are my results.
The first screenshot is the result on the website of Qualys SSL Labs - Projects / SSL Client Test:
The second screenshot is the result of SSL/TLS Client Security Test on the website BrowserLeaks.com:
As you can see, it works perfectly and both, TLS 1.0 and TLS 1.1, are enabled, too. This proxy provides all TLS protocols from TLS 1.0 to 1.3. It is the most recent ProxHTTPSProxy ever.
Cheers, AstroSkipper
0 -
2 hours ago, cmalex said:
Greretings.
Yes.
In new archive - upgraded openssl (3.0.0 -> 3.0.5), cryptography (3.3.2 -> 3.4.8), created ProxHTTPSProxy.exe, small changes in directory structure.
Best regards.
Hello again, @cmalex, at the risk of repeating myself, you are absolutely great!
Thank you so much for all your efforts and for the quickest recompilation ever!
I know nearly all about ProxHTTPSProxy, but nothing about the other proxy 3proxy. Could you provide some information how to use it? Is there any certificate I have to install in my system? In your first release, I can see such a certificate, but in your latest one, there is none.
Kind regards, AstroSkipper
0 -
25 minutes ago, cmalex said:
Greetings.
Yes, i see that. But on my screenshots same version with IE8 give me SSL3 TLS1.0 TLS1.1 enabled. And wget also can see SSL3
wget.warc.gz - result of command 'wget -e "https_proxy=127.0.0.1:8079" "https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html" --no-check-certificate --warc-file=wget'
I can't find old mails with descriptions - so much easiest solution is to recompile cryptography 3.4.8 with new OpenSSL3.0.5. 3proxy can use much more ciphers.
ProxHTTPSProxy.EXE - launcher based on pip scripts - it just call python37.exe and import ProxHTTPSProxy.py
https://mega.nz/#!f8EFRIRI!6VA8Jb5Hydgoc5EEqrT1cz-8q9W9EAKgAXy9EcSPpbo
Best regards.
And again, thank you so much for all this information and for your new download link! Recompiling cryptography 3.4.8 with new OpenSSL3.0.5 would be great, of course. The more recent the better, especially in the regards of ciphers and security protocols. What does your new archive contain? Maybe, I am a bit confused.
Did you already recompile it? I am writing here on my Android tablet, I have to start my desktop computer, obviously, to check what you have done and what the new archive is about.
1 -
3 minutes ago, XPerceniol said:
Thank you - will take some time over the weekend - looks very complicated.
If you need assistance, don't hesitate to ask me. The proxy ProxyMII is not as complicated as it seems to be.
And it definitely works.
1 -
2 hours ago, cmalex said:4 hours ago, AstroSkipper said:
You disabled TLS 1.0 and 1.1 protocol due to security reasons. Is that correct?
I'm not sure. Sorry, it was A LOT time ago. I'd preffered to enable weak ciphers for use with IE5 in Win98...
In my test of ProxyMII, I could see that TLS 1.0 and 1.1 protocol was disabled. Take a look at my screenshots some posts above!
Presumably, due to security reasons. And that's fine with me. It was just a question for the reasons.
Kind regards, AstroSkipper
0 -
Hi @Tripredacus, thanks a lot for your recommendation to change the title of this thread for being more specific! The person I was looking for has been found. And, maybe, it is also your merit.
Therefore, thanks again!
Kindest regards, AstroSkipper
0 -
I hadn't had much hope that this would happen. But, from now on, we definitely have a proxy with TLS 1.3 protocol support targeting Windows XP.
More details can be found in my thread:
I'll keep you informed.
Cheers, AstroSkipper
3 -
41 minutes ago, cmalex said:
Greetings.
I'm not sure. Sorry, it was A LOT time ago. I'd preffered to enable weak ciphers for use with IE5 in Win98...
Please try to open https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html with IE.
Currently ProxyMII from same archive show all TLS+SSL3. But i remember a much larger amount of ciphers (lack of weak\insecure)... I'll to check my archives.
Sorry, i can't set to work neither py2exe nor pyinstaller...
Best regards.
Thanks a lot for the further information and for your reply! Your proxy ProxyMII is definitely great, and, after testing 3proxy, I'll decide which of your proxies I'll implement in my ProxHTTPSProxy's PopMenu for more convenient use, with your permission and with credits to you, of course. But, anyway, your proxy or maybe, your proxies will future-proof Windows XP in any case.
And once again, many thanks for that!
Cheers, AstroSkipper
0
POSReady updates are cool 
, and they work perfectly! 
I use them since 2014. Everything is fine, and most of it is good. 
Did you already recompile it? 
Looking for a person with Python programming skills to implement TLS 1.3 functionality in ProxHTTPSProxy REV3e
in Windows XP
Posted · Edited by AstroSkipper
correction
Hi @Dave-H, as mentioned in previous posts, @cmalex will provide a corrected archive of his proxies due to licensing problems. But I think some of us have already downloaded the second release, and a few of them had problems to get it work. Therefore, I wrote a short tutorial.
Didn't you still download it? 