Package: signal-tlsd
Source: rust-signal-tlsd
Version: 0.1.1-1
Architecture: arm64
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Installed-Size: 2528
Depends: systemd | systemd-standalone-sysusers | systemd-sysusers, systemd | systemd-standalone-tmpfiles | systemd-tmpfiles, libc6 (>= 2.34), libgcc-s1 (>= 4.2)
Built-Using: rust-rustls (= 0.23.41+ds-1), rust-rustls-pki-types (= 1.14.1+ds-1), rust-rustls-webpki (= 0.103.13+ds-1)
Static-Built-Using: rust-anstyle (= 1.0.14-1), rust-anyhow (= 1.0.102-1), rust-arc-swap (= 1.9.1-1), rust-bytes (= 1.11.1-1), rust-cfg-if (= 1.0.4-1), rust-clap (= 4.6.1-1), rust-clap-builder (= 4.6.0-1), rust-clap-lex (= 1.1.0-1), rust-defaults (= 1.93.1ubuntu1), rust-env-filter (= 1.0.1-1), rust-env-logger (= 0.11.10-1), rust-errno (= 0.3.14-1), rust-getrandom (= 0.4.2-3), rust-libc (= 0.2.186-1), rust-log (= 0.4.32-1), rust-mio (= 1.2.0-1), rust-once-cell (= 1.21.4-1), rust-pin-project-lite (= 0.2.16-1), rust-ring (= 0.17.14-5), rust-rustls (= 0.23.41+ds-1), rust-rustls-pki-types (= 1.14.1+ds-1), rust-rustls-webpki (= 0.103.13+ds-1), rust-signal-hook-registry (= 1.4.8-1), rust-socket2 (= 0.5.10-1), rust-subtle (= 2.6.1-1), rust-tokio (= 1.52.3-2), rust-tokio-rustls (= 0.26.4-1), rust-untrusted (= 0.9.0-2), rust-zeroize (= 1.8.2-1)
Section: net
Priority: optional
Homepage: https://github.com/kpcyrd/signal-tlsd
Description: Standalone Rust implementation of Signal's domain fronting TLS proxy
 Negotiates an outer TLS handshake and listens for an incoming TLS connection
 from the Signal client. The inner TLS connection remains end-to-end encrypted
 between the client and the Signal server, while the outer TLS connection is
 terminated at the proxy.
 .
 This evades censorship based on IP address blocking, DNS filtering, and
 SNI-based deep packet inspection.
 .
 It implements the protocol of the official Signal-TLS-Proxy, but in a single
 process instead of two nginx instances glued together with docker-compose.
 .
 It was successfully field-tested in April 2026 to evade Russian censorship of
 Signal, through a VPS located in Kazakhstan.
