Xymon Mailing List Archive search

Proxy HTTPS requests don't use CONNECT

list Jeremy Laidman
Mon, 6 Jul 2020 09:46:49 +1000
Message-Id: <CACO=user-425359d22a7c@xymon.invalid>

Nicola

I think you're out of luck on this one. The proxy test is probably intended
to test that the proxy is working, not that the end-point URL is working,
and consequently is not a full implementation. I note that the docs/TODO
file in v4.3.30 shows:
* https proxying (proxy CONNECT protocol)
which suggests that CONNECT is not implemented.

Cheers
Jeremy


On Mon, 29 Jun 2020 at 19:31, Nicola <user-2c63804b6921@xymon.invalid> wrote:
Hi, I am trying to setup some squid proxy checks with Xymon 4.3.17 (or
4.3.28: I have 2 servers in manual failover).
* I added the `--bb-proxy-syntax` flag to the [xymonnet] section of
tasks.cfg
* I added a line with "1.1.1.1   proxy # testip
http://1.1.1.1:3128/https://github.com/"; to hosts.cfg
* I spun up a tcpdump, and I see requests coming as "GET
https://github.com/ HTTP/1.1" instead of the expected "CONNECT
github.com:443"

The error page states:
https://www.github.com/ - Not Implemented

If I use "https" as the protocol for the proxy part, I get
https://github.com/ - SSL error
and

Unspecified SSL error in SSL_connect to 30755/tcp on host 1.1.1.1:
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
in the log
(of course I cannot read the request through tcpdump)

Is there anything I am missing?

Thank you

--
Nicola