> I am developing some client code (on NT4.0) to talk to a Web Server and
> would like to be able to utilize proxy servers. I see some references to
> "proxy" in the conn.c demo and in the bio.h include file, but I have not
> found any supporting code, doc, or samples (conn.c appears to be
> incomplete). Does anyone know where I could find either doc or sample code
> on the required exchange sequence to implement SSL through a proxy.
>
> It seems that an HTTP "CONNECT" packet needs to be sent before proceeding
> with the SSL negotiation. Does this sound fundamentally correct?

Hi, Phil

Yes. In a 'normal' situation where a client connects via a proxy the
connection is established by
'CONNECT x.y.z HTTP/1.x' (where x could be 0 or 1 depending on which http
command the
proxy will also supports). After sending this kind of request the
client(browser) waits for an
'HTTP/1.x 200 Connection established'. If those two message were were
exchanged the
SSL handshake can start.
If you are interesseted in some proxy code which isn't SSL enabled take a look
at www.junkbuster.com.
They delivered a GPL'ed software which is abel to filter http headers, URLs,
cookies and .....
I think its a good starting point as I used it on my own when I did a SSL
proxy implementation.


Hope this helps

    Michael
begin:vcard 
n:Voucko;Michael
x-mozilla-html:FALSE
org:<p align=right><b><font color=green>SECUDE </font></b><font color=gray><i>  Sicherheitstechnologie<br>Informationssysteme GmbH<
adr:;;Julius-Reiber-Strasse 17;Darmstadt;;64293;Germany
version:2.1
email;internet:[EMAIL PROTECTED]
title:<hr size=1>
tel;fax:06151-88006-26
tel;work:06151-88006-27
note:<hr size=1>German WWW: <a href=http://www.secude.de>http://www.secude.de</a></br>English WWW: <a href=http://www.secude.com>http://www.secude.com</a><hr size=1>
x-mozilla-cpt:;2
fn:Michael Voucko
end:vcard

Reply via email to