Ku xaqiiji proxy-ga HTTPS buundo stunnel oo maxalli ah

App-ka sii barta HTTP aan sirgashanayn ee loopback, halka stunnel uu xaqiijinayo TLS ilaa proxy-ga dhabta ah.

[proxy_tls]
client = yes
accept = 127.0.0.1:3129
connect = proxy.example:8443
verifyChain = yes
CAfile = /path/to/trusted-ca-bundle.pem
checkHost = proxy.example
sni = proxy.example

Isticmaal proxy-ga fog ee loogu talagalay iyo xidhmo CA la aamini karo. verifyChain wuxuu hubiyaa silsiladda bixiyeyaasha shahaadadiisa; checkHost wuxuu hubiyaa magaciisa. sni wuxuu diraa magaca balse ma xaqiijiyo.

Macmiilka proxy-ga HTTP u jeedi barta maxalliga ah:

curl --proxy http://127.0.0.1:3129 https://www.example.org/

App-ku weli wuxuu sameeyaa CONNECT iyo gelitaan kasta oo proxy-gu u baahan yahay. stunnel wuxuu ku daraa qaybta TLS, ma aha xaqiijinta aqoonsiga HTTP. Adeegga fog ee dhegeysanaya waa inuu dhab ahaan bixiyo proxy HTTP oo ku socda TLS.

Mareegaha HTTPS, TLS-ga meesha loo socdo wuxuu ku sii socdaa gudaha jidkan isaga oo wata xaqiijintiisa caadiga ah. Labada shahaado waxay aqoonsadaan dhinacyo isku xidh oo kala duwan.

Maqaallo la xiriira