python/python-mitmproxy
SHA256
14
0
Fork 0
forked from pool/python-mitmproxy
Code Pull Requests Activity
Files
main
python-mitmproxy/python-mitmproxy.spec
Steve Kowalik ab88c497a4 - Update to 11.1.2: 
* CVE-2025-23217: mitmweb's API now requires an authentication token by
    default. The mitmweb API is bound to localhost only, but @gronke found
    that an attacker can circumvent that restriction by tunneling requests
    through the proxy server itself in an SSRF-style attack.
    (fa89055, @mhils)  (bsc#1236890)
  * Add (optional) password protection for mitmweb. The web_password option
    replaces the randomly-generated token authentication with a fixed secret
    that survives mitmproxy restarts. (0bd573a, @mhils)
  * mitmweb can now be hosted under arbitrary domains, the previously-used
    DNS rebind protection is not required anymore. (62693af, @mhils)
  * Security Hardening: mitmweb's xsrf_token cookie is now HttpOnly;
    SameSite=Strict. (#7491, @mhils)
  * Fix console freezing due to DNS queries with an empty question
    section. (#7497, @sujaldev)
  * Fixed a bug that caused mitmproxy to crash when loading prior knowledge
    h2 flows. (#7514, @sujaldev)
  * Fix a bug where mitmproxy would get stuck in secure web proxy mode when
    using ignore_hosts or allow_hosts. (#7519, @mhils)
  * Copy request/response data to the clipboard in mitmweb (#7352, @lups2000)
  * Fix a bug where exporting a curl or httpie command with escaped
    characters would lead to different data being sent.
    (#7520, @proteusvacuum)
  * Local Capture Mode is now available on Linux as well. (#7440, @mhils)
  * mitmproxy now requires Python 3.12 or above. (#7440, @mhils)
  * Add cache-busting for mitmweb's front end code. (#7386, @mhils)
  * Clicking the URL in mitmweb now places the cursor at the current
    position instead of selecting the entire URL. (#7385, @lups2000)
  * Add missing status codes (#7455, @jwadolowski)
  * All filter expressions are now case-insensitive by default. Users can

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-mitmproxy?expand=0&rev=24
2025-02-10 04:57:19 +00:00

153 lines
5.6 KiB
RPMSpec
Raw Permalink Blame History

#
# spec file for package python-mitmproxy
#
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?sle15_python_module_pythons}
# Upstream only supports Python 3.12+!
%define skip_python311 1
Name: python-mitmproxy
Version: 11.1.2
Release: 0
Summary: An interactive, SSL/TLS-capable intercepting proxy
License: MIT
URL: https://mitmproxy.org
Source: https://github.com/mitmproxy/mitmproxy/archive/refs/tags/v%{version}.tar.gz#/mitmproxy-%{version}.tar.gz
BuildRequires: %{python_module Brotli >= 1.0}
BuildRequires: %{python_module Flask >= 3.0}
BuildRequires: %{python_module aioquic >= 1.1.0}
BuildRequires: %{python_module argon2-cffi >= 23.1.0}
BuildRequires: %{python_module asgiref >= 3.2.10}
BuildRequires: %{python_module certifi >= 2019.9.11}
BuildRequires: %{python_module cryptography >= 42.0}
BuildRequires: %{python_module h11 >= 0.11}
BuildRequires: %{python_module h2 >= 4.1}
BuildRequires: %{python_module hyperframe >= 6.0}
BuildRequires: %{python_module hypothesis >= 5.8}
BuildRequires: %{python_module kaitaistruct >= 0.10}
BuildRequires: %{python_module ldap3 >= 2.8}
BuildRequires: %{python_module mitmproxy-rs >= 0.11}
BuildRequires: %{python_module msgpack >= 1.0.0}
BuildRequires: %{python_module parver >= 0.1}
BuildRequires: %{python_module passlib >= 1.6.5}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module publicsuffix2 >= 2.20190812}
BuildRequires: %{python_module pyOpenSSL >= 22.1}
BuildRequires: %{python_module pyparsing >= 2.4.2}
BuildRequires: %{python_module pyperclip >= 1.9.0}
BuildRequires: %{python_module pytest >= 6.1.0}
BuildRequires: %{python_module pytest-asyncio >= 0.17.0}
BuildRequires: %{python_module requests >= 2.9.1}
BuildRequires: %{python_module ruamel.yaml >= 0.16}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module sortedcontainers >= 2.3}
BuildRequires: %{python_module tornado >= 6.4}
BuildRequires: %{python_module urwid >= 2.6.14}
BuildRequires: %{python_module wheel}
BuildRequires: %{python_module wsproto >= 1.0}
BuildRequires: %{python_module zstandard >= 0.15}
BuildRequires: fdupes
BuildRequires: python-rpm-macros
Requires: python-Brotli >= 1.0
Requires: python-Flask >= 3.0
Requires: python-aioquic >= 1.1.0
Requires: python-argon2-cffi >= 23.1.0
Requires: python-asgiref >= 3.2.10
Requires: python-certifi >= 2019.9.11
Requires: python-cryptography >= 42.0
Requires: python-h11 >= 0.11
Requires: python-h2 >= 4.1
Requires: python-hyperframe >= 6.0
Requires: python-kaitaistruct >= 0.10
Requires: python-ldap3 >= 2.8
Requires: python-mitmproxy-rs >= 0.11
Requires: python-msgpack >= 1.0.0
Requires: python-passlib >= 1.6.5
Requires: python-publicsuffix2 >= 2.20190812
Requires: python-pyOpenSSL >= 22.1
Requires: python-pyparsing >= 2.4.2
Requires: python-pyperclip >= 1.9.0
Requires: python-ruamel.yaml >= 0.16
Requires: python-sortedcontainers >= 2.3
Requires: python-tornado >= 6.4
Requires: python-urwid >= 2.6.14
Requires: python-wsproto >= 1.0
Requires: python-zstandard >= 0.15
Requires(post): update-alternatives
Requires(postun): update-alternatives
BuildArch: noarch
%python_subpackages
%description
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy with a console
interface for HTTP/1, HTTP/2, and WebSockets.
mitmdump is the command-line version of mitmproxy. Think tcpdump for HTTP.
mitmweb is a web-based interface for mitmproxy.
%prep
%autosetup -p1 -n mitmproxy-%{version}
rm mitmproxy/contrib/kaitaistruct/make.sh
echo "
# increase test deadline for slow obs executions
import hypothesis
hypothesis.settings.register_profile(
'obs',
deadline=5000,
suppress_health_check=[hypothesis.HealthCheck.too_slow]
)
" >> test/conftest.py
%build
%pyproject_wheel
%install
%pyproject_install
%python_expand %fdupes %{buildroot}%{$python_sitelib}
%python_clone -a %{buildroot}%{_bindir}/mitmdump
%python_clone -a %{buildroot}%{_bindir}/mitmproxy
%python_clone -a %{buildroot}%{_bindir}/mitmweb
%check
# test_refresh fails on i586... wrong timestamp type, maybe?
# test_rollback and test_output[None-expected_out0-expected_err0] just randomly fail on i586
# test_dns and test_name_servers require networking
# test_tun_mode requires root to create a TUN device
%pytest -k "not (test_refresh or test_rollback or test_output or test_name_servers or test_dns or test_tun_mode)" --hypothesis-profile="obs"
%post
%python_install_alternative mitmdump
%python_install_alternative mitmproxy
%python_install_alternative mitmweb
%postun
%python_uninstall_alternative mitmdump
%python_uninstall_alternative mitmproxy
%python_uninstall_alternative mitmweb
%files %{python_files}
%doc README.md CHANGELOG.md
%license LICENSE
%{python_sitelib}/mitmproxy
%{python_sitelib}/mitmproxy-%{version}.dist-info
%python_alternative %{_bindir}/mitmdump
%python_alternative %{_bindir}/mitmproxy
%python_alternative %{_bindir}/mitmweb
%changelog
View Git Blame Copy Permalink