OpenSSL s_client ta hanyar proxy na HTTP da tabbatarwa ta asali

Yi amfani da zaɓuɓɓukan proxy_user da proxy_pass na OpenSSL tare da kiyaye tabbatar da sunan masaukin manufa.

OpenSSL 3.x s_client yana ba da zaɓuɓɓukan proxy-user da tushen kalmar sirri don proxy na HTTP CONNECT. Don yanayin da ya riga ya fitar da PROXY_USER da PROXY_PASSWORD:

openssl s_client \
  -proxy proxy.example.net:8080 \
  -proxy_user "$PROXY_USER" \
  -proxy_pass env:PROXY_PASSWORD \
  -connect example.com:443 \
  -servername example.com \
  -verify_hostname example.com \
  -verify_return_error

Haƙiƙanin sunayen zaɓin suna amfani da layin ƙasa: -proxy_user da -proxy_pass. Ƙarshen proxy ɗin shine host:port, yayin da connect da servername ke gano manufar.

proxy_pass yana amfani da tsarin tushen kalmar sirri na OpenSSL. env:PROXY_PASSWORD yana karanta canjin yanayi da aka ambata; file:/path/to/file wani nau'i ne na tushe da aka rubuta. Kalmar sirri marar tsari ba ita ce tsarin hujja ɗaya ba.

Zaɓuɓɓukan da aka nuna suna buƙatar tabbatar da takardar shaidar da sunan masauki, tare da ɗaukar kurakuran tabbatarwa a matsayin masu mutuwa. Samar da ingantaccen tsarin CA, kamar CAfile da ake buƙata, don shigarwa da manufar.

Wannan tabbatarwar proxy ita ce tabbatarwa ta asali. Haɗin proxy ɗin da aka nuna HTTP ne kawai, don haka musafaha TLS na gaba na manufar ba ya ɓoye wannan musayar shiga ta farko. Ba ya aiwatar da tattaunawar proxy ta NTLM ko Kerberos.

Labarai masu alaƙa