Proxy HTTPS requests don't use CONNECT
list Nicola Canepa
Hi, I am trying to setup some squid proxy checks with Xymon 4.3.17 (or 4.3.28: I have 2 servers in manual failover). * I added the `--bb-proxy-syntax` flag to the [xymonnet] section of tasks.cfg * I added a line with "1.1.1.1 proxy # testip http://1.1.1.1:3128/https://github.com/" to hosts.cfg * I spun up a tcpdump, and I see requests coming as "GET https://github.com/ HTTP/1.1" instead of the expected "CONNECT github.com:443" The error page states:
https://www.github.com/ - Not Implemented
If I use "https" as the protocol for the proxy part, I get
https://github.com/ - SSL error
and Unspecified SSL error in SSL_connect to 30755/tcp on host 1.1.1.1:
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
in the log (of course I cannot read the request through tcpdump) Is there anything I am missing? Thank you -- Nicola
list Jeremy Laidman
Nicola I think you're out of luck on this one. The proxy test is probably intended to test that the proxy is working, not that the end-point URL is working, and consequently is not a full implementation. I note that the docs/TODO file in v4.3.30 shows:
* https proxying (proxy CONNECT protocol)
which suggests that CONNECT is not implemented. Cheers Jeremy
▸
On Mon, 29 Jun 2020 at 19:31, Nicola <user-2c63804b6921@xymon.invalid> wrote:
Hi, I am trying to setup some squid proxy checks with Xymon 4.3.17 (or 4.3.28: I have 2 servers in manual failover). * I added the `--bb-proxy-syntax` flag to the [xymonnet] section of tasks.cfg * I added a line with "1.1.1.1 proxy # testip http://1.1.1.1:3128/https://github.com/"; to hosts.cfg * I spun up a tcpdump, and I see requests coming as "GET https://github.com/ HTTP/1.1" instead of the expected "CONNECT github.com:443" The error page states:https://www.github.com/ - Not ImplementedIf I use "https" as the protocol for the proxy part, I gethttps://github.com/ - SSL errorand Unspecified SSL error in SSL_connect to 30755/tcp on host 1.1.1.1:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocolin the log (of course I cannot read the request through tcpdump) Is there anything I am missing? Thank you -- Nicola