package adapters import ( "bufio" "bytes" "crypto/tls" "encoding/base64" "errors" "fmt" "io" "net" "net/http" "strconv" C "github.com/Dreamacro/clash/constant" ) type Http struct { *Base addr string user string pass string tls bool skipCertVerify bool tlsConfig *tls.Config } type HttpOption struct { Name string `proxy:"name"` Server string `proxy:"server"` Port int `proxy:"port"` UserName string `proxy:"username,omitempty"` Password string `proxy:"password,omitempty"` TLS bool `proxy:"tls,omitempty"` SkipCertVerify bool `proxy:"skip-cert-verify,omitempty"` } func (h *Http) Dial(metadata *C.Metadata) (net.Conn, error) { c, err := dialTimeout("tcp", h.addr, tcpTimeout) if err == nil && h.tls { cc := tls.Client(c, h.tlsConfig) err = cc.Handshake() c = cc } if err != nil { return nil, fmt.Errorf("%s connect error", h.addr) } tcpKeepAlive(c) if err := h.shakeHand(metadata, c); err != nil { return nil, err } return c, nil } func (h *Http) shakeHand(metadata *C.Metadata, rw io.ReadWriter) error { var buf bytes.Buffer var err error addr := net.JoinHostPort(metadata.String(), metadata.DstPort) buf.WriteString("CONNECT " + addr + " HTTP/1.1\r\n") buf.WriteString("Host: " + metadata.String() + "\r\n") buf.WriteString("Proxy-Connection: Keep-Alive\r\n") if h.user != "" && h.pass != "" { auth := h.user + ":" + h.pass buf.WriteString("Proxy-Authorization: Basic " + base64.StdEncoding.EncodeToString([]byte(auth)) + "\r\n") } // header ended buf.WriteString("\r\n") _, err = rw.Write(buf.Bytes()) if err != nil { return err } var req http.Request resp, err := http.ReadResponse(bufio.NewReader(rw), &req) if err != nil { return err } if resp.StatusCode == 200 { return nil } if resp.StatusCode == 407 { return errors.New("HTTP need auth") } if resp.StatusCode == 405 { return errors.New("CONNECT method not allowed by proxy") } return fmt.Errorf("can not connect remote err code: %d", resp.StatusCode) } func NewHttp(option HttpOption) *Http { var tlsConfig *tls.Config if option.TLS { tlsConfig = &tls.Config{ InsecureSkipVerify: option.SkipCertVerify, ClientSessionCache: getClientSessionCache(), ServerName: option.Server, } } return &Http{ Base: &Base{ name: option.Name, tp: C.Http, }, addr: net.JoinHostPort(option.Server, strconv.Itoa(option.Port)), user: option.UserName, pass: option.Password, tls: option.TLS, skipCertVerify: option.SkipCertVerify, tlsConfig: tlsConfig, } }