mirror of
https://github.com/lwthiker/curl-impersonate.git
synced 2025-04-27 07:36:47 +00:00
686cb75967
Remove the --false-start flag completely. In the Chrome version it has no affect, and in the Firefox version it may cause connection errors. This flag doesn't seem to affect TLS or HTTP signatures so is safe to remove. The flag seems to cause connection errors with some http/2 servers. The server chooses http/2 based on alpn but curl initiates a http/1.1 connection instead. This is an upstream bug in curl that affects us as well.
22 lines
1.7 KiB
Bash
Executable File
22 lines
1.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Find the directory of this script
|
|
dir=${0%/*}
|
|
|
|
# The list of ciphers can be obtained by looking at the Client Hello message in
|
|
# Wireshark, then converting it using this reference
|
|
# https://wiki.mozilla.org/Security/Cipher_Suites
|
|
"$dir/curl-impersonate-chrome" \
|
|
--ciphers TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA:TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:TLS_RSA_WITH_AES_256_GCM_SHA384:TLS_RSA_WITH_AES_128_GCM_SHA256:TLS_RSA_WITH_AES_256_CBC_SHA:TLS_RSA_WITH_AES_128_CBC_SHA:TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA:TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA:TLS_RSA_WITH_3DES_EDE_CBC_SHA \
|
|
--curves X25519:P-256:P-384:P-521 \
|
|
--signature-hashes ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256,rsa_pkcs1_sha256,ecdsa_secp384r1_sha384,ecdsa_sha1,rsa_pss_rsae_sha384,rsa_pss_rsae_sha384,rsa_pkcs1_sha384,rsa_pss_rsae_sha512,rsa_pkcs1_sha512,rsa_pkcs1_sha1 \
|
|
-H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15' \
|
|
-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
|
|
-H 'Accept-Language: en-GB,en-US;q=0.9,en;q=0.8' \
|
|
-H 'Accept-Encoding: gzip, deflate, br' \
|
|
--http2 --compressed \
|
|
--tlsv1.0 --no-tls-session-ticket \
|
|
--cert-compression zlib \
|
|
--http2-pseudo-headers-order 'mspa' \
|
|
"$@"
|