Qedela ukuhlaziya izihloko ze-CONNECT ngaphambi kokudlulisa i-client stream

I-proxy server edlulisa kuphela ngemva komugca wesicelo ingathumela i-Host header yayo ku-TLS port yendawo okuyiwa kuyo.

Ngemva komugca wesicelo se-CONNECT, lama-byte asengaweproxy:

CONNECT service.example:443 HTTP/1.1\r\n
Host: service.example:443\r\n
User-Agent: example-client\r\n
\r\n

Ukudlulisa Host noma User-Agent ku-port 443 kunikeza indawo okuyiwa kuyo izihloko zombhalo ocacile lapho ilindele i-TLS. Lokho kwehluleka kungenzeka ngaphambi kokuba noma yikuphi ukukhetha kwe-cipher kube nencazelo.

  1. Funda futhi uhlaziye kuze kufike esiphethweni sezihloko esinomugca ongenalutho, ngaphakathi kwesikhathi sokulungiselela nomkhawulo wosayizi wezihloko.
  2. Sebenzisa ukuqinisekiswa kwe-proxy kanye nenqubomgomo yendawo okuyiwa kuyo.
  3. Sungula ukuxhumana okuvunyelwe kwethagethi.
  4. Thumela impendulo ye-CONNECT ephumelelayo futhi ungene kumodi yomhubhe.

Gcina ama-byte alondoloziwe ngemva komngcele ukuze asetshenziswe esimweni esilandelayo esifanele. Ungawalahli noma ungawathathi izihloko zesicelo se-proxy njengesicelo sakamuva sewebhusayithi.

Iklayenti linomthwalo ofanayo ohlangothini lwempendulo: qedela ukufunda impendulo ye-CONNECT ephumelelayo ngaphambi kokuqala iphrothokholi yomhubhe. Zombili iziphetho kufanele zivumelane ngomngcele lapho i-stream ishintsha indima.

Izihloko ezihlobene