client: curl 7.52.0-DEV (x86_64-pc-linux-gnu) libcurl/7.52.0-DEV OpenSSL/1.0.1h zlib/1.2.8 Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smtp smtps telnet tftp Features: AsynchDNS Largefile NTLM SSL libz TLS-SRP UnixSockets HTTPS-proxy
proxy-server: squid-3.3.12 with http-md5-digest auth and https_port enabled. test 1 (PEM cert): curl -v --proxy-cacert /etc/ssl/certs/ourCAbundle.crt --proxy-cert ~/.certs/my.pem --proxy https://myproxy:3129 --proxy-digest --proxy-user $USER --location https://www.google.com/ "Enter proxy password for user" appears once, but "Enter PEM pass phrase" appears twice, second on "302 Found...Location" reply from google. test 2 (PKCS12 cert): curl -v --proxy-cacert /etc/ssl/certs/ourCAbundle.crt --proxy-cert ~/.certs/my.p12 --proxy-cert-type P12 --proxy https://myproxy:3129 --proxy-digest --proxy-user $USER --location https://www.google.com/ curl asks "Enter proxy password for user" and stops: "curl: (58) could not parse PKCS12 file, check password, OpenSSL error error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure" ( same behavior as explained in https://github.com/curl/curl/pull/919 ) all works fine if cert password specified on command line : --proxy-cert "my.pem:password" or --proxy-cert "my.p12:password" 2016-11-25 2:48 GMT+04:00 Daniel Stenberg <[email protected]>: > On Thu, 24 Nov 2016, Daniel Stenberg wrote: > > I plan to merge this within 24 hours or so >> > > Inintial HTTPS proxy support has now been merged. Let's fix the > outstanding quirks and TODOs now! > > -- > > / daniel.haxx.se > ------------------------------------------------------------------- > List admin: https://cool.haxx.se/list/listinfo/curl-library > Etiquette: https://curl.haxx.se/mail/etiquette.html
------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html
