Umgqa omusha owengeziwe ungaphula i-TLS ngemva kwe-CONNECT
Hlola ukwakheka kwezihloko ze-HTTP lapho isixhumi se-proxy esibhalwe ngesandla sivula umhubhe futhi siletha iphutha le-TLS ngokushesha.
Lapho i-CONNECT ibuyisela i-200 futhi i-TLS yehluleka ukuhumusha ngokushesha, hlola amabhayithi omngcele kusixhumi ngaphambi kokushintsha izitifiketi noma ama-cipher.
Inani lokugunyaza elikhiqiziwe kungenzeka selivele liphele ngomugqa omusha. Ukwengeza omunye umkhawulo womugqa kungaqeda izihloko ze-HTTP ngaphambi kwesikhathi, kushiye inkambu ye-Host ehlosiwe noma omunye umbhalo ocacile ngemuva kwesicelo.
Isicelo esincane se-HTTP/1.1 CONNECT sisebenzisa i-CRLF phakathi kwemigqa nomugqa ongenalutho ekugcineni:
b"CONNECT example.com:443 HTTP/1.1\r\nHost: example.com:443\r\n\r\n"Beka noma iyiphi inkambu yokugunyaza ngaphambi kwalowo mugqa wokugcina ongenalutho, ngaphandle kokuphuka komugqa okufakiwe. Ku-Python, i-"\n" imele umugqa omusha; intambo eluhlaza equkethe i-backslash nohlamvu n ayimeleli. Hlola ukuthi imuphi amabhayithi akhiqizwa umsizi wokufaka ikhodi ngaphambi kokuzama ukuwususa—abasizi bakudala babengengeza ukuphuka kwemigqa.
Lapho i-CONNECT iphumelela, lawo mabhayithi asele ingeyeprotocol yomhubhe. Umbhalo ocacile olahlekile ungafinyelela kozakwethu olindele i-TLS. Isimo esiphumelelayo asikwazi ukulungisa amabhayithi asevele emugqeni ngemva kwesicelo esingalungile.
Hlola nomngcele wokwamukela. Funda impendulo ephelele ye-proxy ngaphambi kokunikeza isokhethi ku-TLS, phatha ukufunda okuyingxenye futhi gcina noma yini efundwe ngale kwezihloko. Ukufunda kanye kwesokhethi akudingeki kube nomlayezo owodwa ophelele.
Uma le parser ingeyakho, qhathanisa ukumelwa kwamabhayithi okuhleliwe nohlelo lolimi lwensimbi; gcina ubude nemingcele yemigqa kubonakala ngenkathi ufihla iphasiwedi. Kuhlelo lokusebenza oludinga kuphela uxhumano lwe-proxy, isixhumi esigcinwe kahle sigwema isidingo sokuba nomlomo waleli khodi lokwakha.