Dhammaystir falanqaynta cinwaannada CONNECT ka hor inta aanad gudbin tiraabta macmiilka

Server proxy oo gudbiya kaliya ka dib safka codsiga ayaa u diri kara cinwaankiisa Host dekedda TLS ee halka loo socdo.

Ka dib safka codsiga CONNECT, bytes-kani weli waxay leeyihiin proxyga:

CONNECT service.example:443 HTTP/1.1\r\n
Host: service.example:443\r\n
User-Agent: example-client\r\n
\r\n

Gudbinta Host ama User-Agent dekedda 443 waxay u keentaa halka loo socdo cinwaanno qoraal cad ah halka ay filayaan TLS. Cilladdan waxay dhici kartaa ka hor inta aan doorashada cipher wax macne ah yeelan.

  1. Akhri oo falanqeey ilaa dabaynta cinwaannada ee safka bannaan, gudaha waqtiga dejinta iyo xaddiga cabbirka cinwaannada.
  2. Codso xaqiijinta proxyga iyo siyaasadda halka loo socdo.
  3. Samee xiriirka bartilmaameedka ee la ansixiyay.
  4. Dir jawaabta CONNECT ee guulaysatay oo gal habka tunnelka.

Kaydi bytes-ka la keydiyay ka dib xadka ee xaaladda xigta ee ku habboon. Ha tuurin ama ha u qaadan cinwaannada codsiga proxyga codsiga dambe ee shabakadda.

Macmiilku wuxuu leeyahay waajib ku habboon dhinaca jawaabta: dhammaystir akhrinta jawaabta CONNECT ee guulaysatay ka hor inta aanad bilaabin borotokoolka tunnelka. Labada dacal waa inay ku heshiiyaan xadka uu tiraabtu door beddelo.

Maqaallo la xiriira