OpenSSL s_client iyada oo loo marayo HTTP proxy leh aqoonsiga aasaasiga ah

Isticmaal doorashooyinka proxy_user iyo proxy_pass ee OpenSSL adigoo haynaya xaqiijinta magaca host-ka loo socdo oo shaqaynaya.

OpenSSL 3.x s_client wuxuu bixiyaa doorashooyin proxy-user iyo isha furaha sirta ah ee HTTP CONNECT proxy. Deegaan horey u dhoofiyay PROXY_USER iyo PROXY_PASSWORD:

openssl s_client \
  -proxy proxy.example.net:8080 \
  -proxy_user "$PROXY_USER" \
  -proxy_pass env:PROXY_PASSWORD \
  -connect example.com:443 \
  -servername example.com \
  -verify_hostname example.com \
  -verify_return_error

Magacyada doorashooyinka dhabta ah waxay isticmaalaan xariiq hoose: -proxy_user iyo -proxy_pass. Barta ugu dambeysa ee proxy waa host:port, halka connect iyo servername ay tilmaamaan halka loo socdo.

proxy_pass wuxuu isticmaalaa qaabka isha furaha sirta ah ee OpenSSL. env:PROXY_PASSWORD wuxuu akhriyaa doorsoome deegaan ee la magacaabay; file:/path/to/file waa qaab kale oo isha ah oo la diiwaangeliyay. Furaha sirta ah ee qaawan ma aha isla qaabka doodda.

Doorashooyinka la muujiyay waxay codsadaan xaqiijinta shahaadada iyo magaca host-ka, iyadoo khaladaadka xaqiijinta loo arko kuwo dilaa ah. Bixi qaabeynta CA habboon, sida CAfile loo baahan yahay, ee rakibaadda iyo halka loo socdo.

Aqoonsigan proxy waa aqoonsi aasaasi ah. Xiriirka proxy ee la muujiyay waa HTTP caadi ah, sidaas darteed gacan-qabsiga TLS ee dambe ee halka loo socdo ma qarinayo isweydaarsiga gelitaanka hore. Ma hirgelinayo wada-hadal proxy NTLM ama Kerberos.

Maqaallo la xiriira