Tabbatar da wakilin HTTPS a gadar stunnel ta cikin gida

Ba manhaja HTTP marar ɓoyewa a loopback, yayin da stunnel ke tabbatar da TLS zuwa ainihin wakili.

[proxy_tls]
client = yes
accept = 127.0.0.1:3129
connect = proxy.example:8443
verifyChain = yes
CAfile = /path/to/trusted-ca-bundle.pem
checkHost = proxy.example
sni = proxy.example

Yi amfani da wakilin nesa da ake nufi da kunshin CA amintacce. verifyChain yana duba jerin masu bayar da takardar shaidarsa; checkHost yana duba sunansa. sni yana aika sunan amma ba ya tabbatar da shi.

Nuna wa abokin cinikin wakilin HTTP wurin haɗin na cikin gida:

curl --proxy http://127.0.0.1:3129 https://www.example.org/

Manhajar ce har yanzu ke yin CONNECT da duk shiga wakili da ake buƙata. stunnel yana ƙara ɓangaren TLS, ba tantancewar HTTP ba. Sabis ɗin da ke sauraron haɗi a nesa dole ne ya samar da wakilcin HTTP ta TLS da gaske.

Ga shafukan HTTPS, TLS na wurin da ake nufi yana ci gaba a cikin wannan hanya da nasa binciken da aka saba. Takardun shaida biyun suna gane ɓangarorin haɗi daban-daban.

Labarai masu alaƙa