WRONG_VERSION_NUMBER ne-proxy: hlola i-HTTP ne-HTTPS

Hlola ukungafani kokuthutha kwe-proxy ngaphambi kokwehlisa izinguqulo ze-TLS noma ukushintsha izilungiselelo zesitifiketi ngenxa yephutha le-SSL elikhohlisayo.

Iphutha lithi “inguqulo engalungile”, ngakho kuyalingeka ukuqala ukushintsha izinguqulo ze-TLS. Ne-proxy, hlola ithuba elandulelayo: ingabe iklayenti lithumele ukuxhawulana kwe-TLS kupoti eyayilinde i-HTTP evamile?

Indawo efana ne-https://example.com/ ne-proxy efana ne-http://proxy.example:8080 iyipheya elivamile. Ukushintsha i-URL yesibili ibe yi-HTTPS kutshela iklayenti ukuthi ibethela ingxoxo yayo ne-proxy uqobo. Lokhu akusona isiyalelo sokuvumela amasayithi e-HTTPS.

Thola ingxoxo yokuqala ye-TLS

Ku-proxy ye-HTTP, iklayenti lingaqala ukuthumela i-CONNECT bese lithola impendulo ye-HTTP. Ngemva kwalokho kuphela liqala i-TLS yendawo engaphakathi kumhubhe. Ku-proxy ye-HTTPS, kuza kuqala ukuxhumana kwe-TLS okwehlukile okuya ku-proxy.

Isihlaziyi se-TLS esithola ikhasi lephutha le-HTTP noma omunye umbhalo ovamile singabika iphutha lephrothokholi. Lawo mazwi awakubeki ukuthi isayithi sisekela ziphi izinguqulo ze-TLS, noma ukuthi isayithi sathintwa ngempela.

  1. Bhala i-URL ye-proxy, kuhlanganise nesikimu sayo, kanye nephrothokholi ebhaliwe yendawo yokugcina.
  2. Thola ukuthi ukwehluleka kwenzeke ngaphambi kwempendulo ye-CONNECT, phakathi ne-TLS yendawo, noma ngesikhathi kuqinisekiswa isitifiketi se-proxy uqobo.
  3. Hlola izinguqulo zangempela zeklayenti nezincikile lapho uqhathanisa isixazululo esidala. Ukusetshenziswa kwe-proxy kwangaphambili ngezinye izikhathi kwakuphatha isikimu ngendlela ehlukile.

Izilungiso eziningana zingaba nezinga elingalungile ngenxa yezizathu ezihlukile. Uhlu lwe-proxy ye-HTTP lunikeza abangeneleli abavamile bendawo yokugcina ye-HTTP bezicelo zomphakathi ezivunyelwe ngaleyo ndlela. Indawo yokugcina ye-HTTP evamile idinga isikimu se-proxy ye-HTTP; indawo yokugcina enikwe amandla ngempela nge-TLS kufanele igcine i-HTTPS nokuqinisekiswa kwesitifiketi sayo. I-proxy eyenqabayo i-CONNECT idinga isevisi noma inqubomgomo esekelwayo, hhayi ukwehliswa kwelabhulali ngokungafanele.

Gcina ukwehluleka kokuqala okubonakalayo. Ukucisha ukuqinisekiswa kwesitifiketi akunakwenza isilaleli esikhuluma i-HTTP kuphela sikhulume i-TLS, futhi ukukhetha inqubomgomo endala yokubhala ngokuyimfihlo akukwazi ukuchaza ukwenqatshwa kwe-HTTP okwathunyelwa ngaphambi kokuxhawulana kwesayithi.

Izihloko ezihlobene