I-OpenSSL s_client nge-HTTP proxy ngokugunyazwa okuyisisekelo

Sebenzisa izinketho ze-OpenSSL proxy_user ne-proxy_pass ngenkathi ugcina ukuqinisekiswa kwegama le-host okuyiwa kulo kuvuliwe.

I-OpenSSL 3.x s_client inikeza izinketho ze-proxy-user nomthombo wephasiwedi we-HTTP CONNECT proxy. Emvelweni esivele ikhipha i-PROXY_USER ne-PROXY_PASSWORD:

openssl s_client \
  -proxy proxy.example.net:8080 \
  -proxy_user "$PROXY_USER" \
  -proxy_pass env:PROXY_PASSWORD \
  -connect example.com:443 \
  -servername example.com \
  -verify_hostname example.com \
  -verify_return_error

Amagama angempela ezinketho asebenzisa i-underscore: -proxy_user ne-proxy_pass. Iphoyinti yokugcina ye-proxy yi-host:port, kuyilapho i-connect ne-servername zikhomba okuyiwa kulo.

I-proxy_pass isebenzisa isintaksi yomthombo wephasiwedi ye-OpenSSL. I-env:PROXY_PASSWORD ifunda ukuguquguquka kwemvelo okuqanjiwe; i-file:/path/to/file ingenye indlela yomthombo ebhaliwe. Iphasiwedi engenalutho ayilona ifomethi yengxoxo efanayo.

Izinketho ezikhonjisiwe zicela ukuhlolwa kwesitifiketi negama le-host, kanti amaphutha okuqinisekisa athathwa njengababulalayo. Nikeza ukulungiselelwa kwe-CA okufanele, njenge-CAfile edingekayo, kokufakiwe nokuyiwa kulo.

Lokhu kugunyazwa kwe-proxy ukugunyazwa okuyisisekelo. Ukuxhumana kwe-proxy okukhonjisiwe yi-HTTP evamile, ngakho ukuxhawulana kwe-TLS kamuva kokuqondiswa akukubeteli lelo shintsho lokungena langaphambili. Akusisebenzisi ukuxoxisana kwe-proxy kwe-NTLM noma i-Kerberos.

Izihloko ezihlobene