[or-cvs] add support for CONNECTing through https proxies.

Ben Laurie ben at algroup.co.uk
Thu Feb 24 17:16:30 UTC 2005


Nick Mathewson wrote:
> On Thu, Feb 24, 2005 at 05:56:58AM -0500, Roger Dingledine wrote:
> 
>>Update of /home2/or/cvsroot/tor/src/or
>>In directory moria.mit.edu:/home2/arma/work/onion/cvs/tor/src/or
>>
>>Modified Files:
>>	config.c connection_or.c directory.c or.h 
>>Log Message:
>>add support for CONNECTing through https proxies.
>>not sure if it works. i don't have an https proxy.
> 
> 
> Somebody should try this.  I don't see how it could work: if I'm
> following correctly, the code will check the proxy's certificate
> against the keys it expects to get from the OR, and reject it.

CONNECT passes the connection through directly (i.e. with termination), 
so if you code this right, it _should_ work.

I didn't look at the code.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff



More information about the tor-dev mailing list