ηԴ ERP  HTTPS ¼ˣ
ʱ䣺2026-11-01 18:35 ~ 18:45
119.29.185.181ѶӦ÷ lhins-rurlkz3bSA2.MEDIUM4


һʲô

  Ŀ¼  C:\ERP\xinfengyuan\cert\
    ca.crt        ֤飨ǩ CACN=XinFengYuan ERP Root CAЧ 2046-10-27
    server.crt    ֤飨CN=119.29.185.181SAN=IP:119.29.185.181 + IP:127.0.0.1 + DNS:localhost
    server.key    ˽ԿRSA-2048

  ļ  C:\ERP\xinfengyuan\https_proxy.py
        HTTPS ս <--TLS(443)-->  <--HTTP(127.0.0.1:8100)--> app/server.py
        ҵĶapp/server.py һû

  ļ  C:\ERP\xinfengyuan\start_xfy_https.bat
        ű

  ƻ XFY_HTTPS
        ϵͳʱ
        ݣSYSTEMȨ
        C:\ERP\xinfengyuan\start_xfy_https.bat
        ־C:\ERP\xinfengyuan\logs\https.log

  Windows ǽ XFY-HTTPS-443
        վ TCP 443 


֤ͨ

  TCP 127.0.0.1:443      -> OPENʵPID Ψһ
  HTTPS /health          -> 200 {"ok":true,...}Դ CA У֤κθ澯
  HTTPS /pc              -> 200173,367 ֽڣҳ
  HTTPS /api/login       -> POST תˣҵ 400 ֤·ͨ
  HTTP  8100ϵַ   -> 200 Ӱ


һ˹

   https://119.29.185.181/health ʱ
  ȷϣʹڷԼĹ IP443 ͬʱ8100 
  => صѶ㣬Ƿڲá

  ҪѶƿ̨ 443
    Ӧ÷̨
      -> ʵ lhins-rurlkz3b
      -> ǽ
      -> ӹ
         ӦͣԶ
         Э飺TCP
         ˿ڣ443
         Դ0.0.0.0/0
         ֻڳã칫ҹ IP Σ
      -> ȷ

  кַɣhttps://119.29.185.181/pc


ġάҪ

    schtasks /end /tn XFY_HTTPS  Ȼ  schtasks /run /tn XFY_HTTPS
  鿴־  C:\ERP\xinfengyuan\logs\https.log
              C:\ERP\xinfengyuan\logs\https_stdout.log
  Ƿţnetstat -ano | findstr :443   ֻ 1  LISTENING
      Windows ͬһ˿ڱ̰󶨣ֶлᵼϽ̽ӵ
      ʷϲȹӣʽschtasks /end + taskkill /f /pid <PID>

  ͣã    schtasks /delete /tn XFY_HTTPS /f
           ɾǽ netsh advfirewall firewall delete rule name=XFY-HTTPS-443
           ɾ 8100 ϵַȫӰ죬ERP ճʹã


塢÷дòͨԣδã

  ļ  C:\ERP\xinfengyuan\https_proxy_sniff.py
  ˼·  Ѿе 8100 ˿ͬʱ֧ http://  https://
        ͻ˵һֽжЭ飺0x16  TLS ֣ HTTP
        ҵĶserver.py ֧ XFY_PORT 

    ڷáݿ⸱ + ʱ˿ 8102/8103֤
          HTTP  ֧ /health -> 200
          HTTPS ֧ /health -> 200 CA У飬޸澯
          HTTPS ֧ /pc     -> 200173,367 ֽ
          HTTPS ֧ POST /api/login -> 400ҵӦ֤·ͨ
          ڼ 443 / 8100 ˿δӰ죬ʱ븱

  ÷ʽҪűԼ 5 жϣ
    1) start_xfy.bat һ  set XFY_PORT=8101
    2) ƻ XFY_HTTPS Ϊִ start_xfy_https_sniff.bat
       ݣset XFY_HTTPS_PORT=8100
             set XFY_UPSTREAM_PORT=8101
             C:\ERP\erp\python\python.exe https_proxy_sniff.py
    3) ͣԭ 8100 
    4) ַΪ https://119.29.185.181:8100/pc

  ŵ㣺ҪѶƿ̨κ¶˿ڣ̿
  ȱ㣺ַһ˿ں :8100Ҫһη

  ȿӣޣsocketserver  setup() ׶ֻ self.request
  self.connection ڣҸ setup() һлḲ self.connection
  ȷд wrap ٰѽ self.requestȻŵ setup()
