Feature Requests item #3076982, was opened at 2010-09-28 15:31
Message generated for change (Tracker Item Submitted) made by atarassov
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=350976&aid=3076982&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: libcurl
Group: encryption
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Andrei Tarassov (atarassov)
Assigned to: Daniel Stenberg (bagder)
Summary: Add support for SSL-based access to proxy servers

Initial Comment:
Trunk version of Apache allows configuring this web server as a tunneling proxy with SSL-based access:
https://issues.apache.org/bugzilla/show_bug.cgi?id=29744

In nutshell, one can connect to Apache via TCP/SSL and get the usual SSL security stuff - encryption and mutual certificate authentication - and then send the HTTP CONNECT command to have Apache tunnel the request to some other server. It would be good if libcurl (and curl command line tool as well) supported this kind of a setup. Namely, the SSL options which one can specify for a usual HTTPS connection should be also available for proxy connections, including:
* protocol (SSLv2, SSLv3, TLS, etc.)
* client certificate/key
* how server (proxy) certificate is to be verified (CA, verifying signature, verifying hostname match)

Note that one can connect to an HTTPS (or FTPS) server via an SSL-enabled tunneling proxy, thus there needs to be two sets of SSL-related settings: for connecting to the proxy and for connecting to the real target server.

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=350976&aid=3076982&group_id=976
Received on 2010-09-28