hackney icon indicating copy to clipboard operation
hackney copied to clipboard

invalid_proxy_transport - returned with https proxy requesting https host

Open canuc opened this issue 2 years ago • 7 comments

Noticed that if the proxy transport is https and the end transport is https -> the request will return invalid_proxy_transport. This seems like https proxies are not supported or am I missing something?

canuc avatar May 10 '22 16:05 canuc

@canuc pleas eprovide more detail, any snippet I could look at ?

benoitc avatar Aug 04 '22 06:08 benoitc

please provide more info there about the issue. https proxies should work.

benoitc avatar Apr 24 '23 15:04 benoitc

The client rejects any requests where both the proxy scheme and the end request scheme are https.

See here:

https://github.com/benoitc/hackney/blob/d6d075f9edcbb7e0b5c9418dba5dd34f2c95bc21/src/hackney.erl#L629

jbernardo95 avatar Apr 24 '23 15:04 jbernardo95

@benoitc Why was my previous comment deleted? Did it not follow the community guidelines? I'm sorry if that was the case.

jbernardo95 avatar Apr 24 '23 15:04 jbernardo95

what specification it is ? to my knowlwdge proxying https to httpta was not specified.

Le lun. 24 avr. 2023 à 17:23, João Bernardo @.***> a écrit :

The client rejects any requests where both the proxy scheme and the end request scheme are https.

See here:

https://github.com/benoitc/hackney/blob/d6d075f9edcbb7e0b5c9418dba5dd34f2c95bc21/src/hackney.erl#L629

— Reply to this email directly, view it on GitHub https://github.com/benoitc/hackney/issues/705#issuecomment-1520384946, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAADRIQCGNVJTACDBVA56WDXC2LHRANCNFSM5VSGGHUQ . You are receiving this because you were assigned.Message ID: @.***>

-- Sent from my Mobile

benoitc avatar Apr 24 '23 15:04 benoitc

As far as I'm aware there isn't a specification for it, it's a variation of the classic HTTP proxying where the connection between the client and the proxy is over TLS instead.

jbernardo95 avatar Apr 24 '23 15:04 jbernardo95

ok i will find an api for it. i think this require separate cerificates to work. there is a new version landing on thursday. will try to add it.

Le lun. 24 avr. 2023 à 17:31, João Bernardo @.***> a écrit :

As far as I'm aware there isn't a specification for it, it's a variation of the classic HTTP proxying where the connection between the client and the proxy is over TLS instead.

— Reply to this email directly, view it on GitHub https://github.com/benoitc/hackney/issues/705#issuecomment-1520396823, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAADRIXDD6O66C6DIX75ST3XC2MFRANCNFSM5VSGGHUQ . You are receiving this because you were mentioned.Message ID: @.***>

-- Sent from my Mobile

benoitc avatar Apr 24 '23 15:04 benoitc