Qinisekisa ubunikazi bephroksi ye-HTTPS ebhulohweni lendawo le-stunnel

Nikeza uhlelo indawo ye-HTTP engabethelwe ku-loopback, kuyilapho i-stunnel iqinisekisa i-TLS eya kuphroksi yangempela.

[proxy_tls]
client = yes
accept = 127.0.0.1:3129
connect = proxy.example:8443
verifyChain = yes
CAfile = /path/to/trusted-ca-bundle.pem
checkHost = proxy.example
sni = proxy.example

Sebenzisa iphroksi ekude oyihlosile nenqwaba ye-CA ethenjwayo. verifyChain ihlola uchungechunge lwabakhiphi besitifiketi sayo; checkHost ihlola igama layo. sni ithumela igama kodwa ayiliqinisekisi.

Khomba iklayenti lephroksi ye-HTTP endaweni yokuxhuma yasendaweni:

curl --proxy http://127.0.0.1:3129 https://www.example.org/

Uhlelo lusaqhuba i-CONNECT nokungena kuphroksi okudingekayo. i-stunnel ingeza ingxenye ye-TLS, hhayi ukuqinisekiswa kobunikazi kwe-HTTP. Isevisi elalela kude kufanele ngempela inikeze iphroksi ye-HTTP phezu kwe-TLS.

Kumawebhusayithi e-HTTPS, i-TLS yendawo okuyiwa kuyo iyaqhubeka ngaphakathi kwalo mzila ngokuhlolwa kwayo okuvamile. Izitifiketi ezimbili zikhomba izinhlangothi ezahlukene zokuxhumana.

Izihloko ezihlobene