vertx-web icon indicating copy to clipboard operation
vertx-web copied to clipboard

Investigate if Vertx WebClient can support HTTP proxy server proxying HTTPS requests

Open sberyozkin opened this issue 2 years ago • 1 comments

Original question: https://stackoverflow.com/questions/76962454/quarkus-vert-x-attempting-to-connect-to-proxy-over-ssl.

Keycloak address is HTTPS based. Squid proxy is HTTP based but HTTPS is attempted between Quarkus and Squid.

I'm marking it as an enhancement as I'm not sure if it is a bug or if the whole concept of HTTP proxy proxying HTTPS requests is very sound from the security point of view.

Additional info: https://serverfault.com/questions/1113988/how-does-a-http-proxy-server-proxy-https-requests (the comment to that unanswered question points to another useful doc)

CC @cescoffier @vietj @tsegismont

sberyozkin avatar Aug 25 '23 10:08 sberyozkin

the Vert.x HTTP client can connect to a remote HTTPS server through a proxy reached with HTTP using an HTTP tunnel, is that what you mean ? https://en.wikipedia.org/wiki/HTTP_tunnel / https://vertx.io/docs/vertx-core/java/#_using_a_proxy_for_httphttps_connections

is that what you meant ?

vietj avatar Aug 28 '23 11:08 vietj