OpenSSL s_client: i-403 ye-proxy yenzeka ngaphambi kwe-TLS yendawo oya kuyo
Thatha i-HTTP 403 ku-CONNECT nge-proxy ye-OpenSSL njengokuhluleka kwesigaba setunnel, futhi ungahloli isitifiketi sendawo oya kuyo kusuka ku-handshake engazange iqale.
Uma i-openssl s_client ithola i-HTTP 403 njengempendulo yesicelo sayo se-CONNECT nge-proxy, qala ngalokho kwenqaba. Itunnel eceliwe ayizange isungulwe.
Nge--proxy, i-s_client icele kuqala i-proxy ye-HTTP ukuthi ixhumane nendawo oya kuyo ekhonjwe nge--connect. Impendulo ye-CONNECT ephumelelayo kuphela eguqula lokho kushintshana kube itunnel ye-handshake ye-TLS yendawo oya kuyo.
Lokhu kulandelana kuchaza umphumela obungadida ngenye indlela: iphutha le-proxy elilandelwa izihloko ezihlobene ne-TLS, isitifiketi somlingani esingekho, noma umugqa wokuqinisekisa obonakala uqinisa umoya. Lezo zinkambu azifakazeli ukuthi isitifiketi sendawo oya kuyo sitholiwe futhi saqinisekiswa. Umsebenzi wama esigabeni esingaphambilini.
Rekhoda impendulo ye-proxy kanye ne-host ne-port yendawo oya kuyo eceliwe. I-403 iqondisa ukunaka esinqumweni sokufinyelela se-proxy; i-407 icela ukuqinisekiswa ku-proxy. Akukho kukho okulungiswa ngokucisha ukuqinisekiswa kwesitifiketi sendawo oya kuyo.
Uma kuvunyelwe ukuhlola ukushintshana, umphumela we--debug we-s_client ungase usize ukudalula ukwenqaba. Gcina noma yiluphi ulwazi lokungena lwe-proxy ngaphandle kwemikhondo eyabiwe. Itunnel ephumelelayo isazodinga ukuhlolwa kwayo kwe-TLS nezitifiketi ngemva kwalokho, kodwa awukho uchungechunge lwesitifiketi esihlosiwe ongaluhlola kuze kufinyelelwe kuleso sigaba ngempela.