According to Alexis Bosson:
> I can't index my HTTPS site with htdig. I will try to explain my problem in
> english. I'm french, sorry for mistakes.
...
> Unable to build connection with cert.mysite.com:443
> (Via proxy proxy.fr.mysite.com:80)
...
> My platform has the following configuration :
> GNU / Linux Debian 2.2
> apache-ssl 1.3.9.13-2
> openssl 0.9.4-5
> ht://Dig 3.1.5
> patched with ftp://ftp.ccsf.org/htdig-patches/3.1.5/ssl.3
> corrected with the comments found in
> http://www.htdig.org/mail/2000/11/0175.html to compile on my platform
>
> ht://Dig perfectly works with a HTTP site on the same server.
>
> It doesn't seems to be a problem of openssl. When I run it, it looks to be
> OK :
> --- Cut here ---
> $ echo GET /|openssl s_client -connect cert.mysite.com:443
I suspect the problem may be due to your use of a proxy server. When
you run the openssl command above, it connects directly to the site,
doesn't it? That's different than what you're asking htdig to do.
If you can connect directly, then you should remove the http_proxy
definition from your htdig.conf file.
> http_proxy: http://proxy.fr.mysite.com:80/
I'm wondering if this isn't perhaps a slight bug in the ssl.3 patch.
It seems to me that only http traffic should go through the proxy
server, and https traffic should not. Perhaps the patch ought to add
an https_proxy attribute for proxying SSL traffic. I don't think the
average HTTP proxy server can handle SSL as well.
By the way, your English is perfectly clear, and your problem report
was more thorough than I've seen on this list in quite some time, so you
don't need to worry about being misunderstood. I hope my answer helps.
--
Gilles R. Detillieux E-mail: <[EMAIL PROTECTED]>
Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/~grdetil
Dept. Physiology, U. of Manitoba Phone: (204)789-3766
Winnipeg, MB R3E 3J7 (Canada) Fax: (204)789-3930
_______________________________________________
htdig-general mailing list <[EMAIL PROTECTED]>
To unsubscribe, send a message to <[EMAIL PROTECTED]> with a
subject of unsubscribe
FAQ: http://htdig.sourceforge.net/FAQ.html