Article delegate-en/1952 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A1948@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: proxy chain
24 Oct 2002 16:14:48 GMT y.sato@delegate.org (Yutaka Sato)


On 10/23/02(19:37) you "Hantke, Jens (GOD)" <ptqdqbdyi-cpuahtm346vr.ml@ml.delegate.org>
wrote in <_A1948@delegate-en.ML_>
 |I want to encrypt communication between two Delegates.
 |client --http--> local_delegate --https--> master_delegate --http--> server
 |This works fine with the following parameters:
 |
 |local delegate:
 |delegated -P8008 -vt FMD="sslway" MASTER="master-delegate:8008"
 |DGROOT="path/to/delegate"
 |
 |master delegate:
 |delegated -P8008 -vt FCL="sslway" DGROOT="path/to/delegate"
 |
 |Now I want to add another (non delegate) proxy server:
 |client --http--> local_delegate --https--> PROXY_SERVER --https-->
 |master_delegate --http--> server
 |
 |is there a way to route the local delegate's requests over the proxy_server
 |to the master-delegate? I tried SSLTUNNEL="proxy_server:port", but that
 |seems to be ignored. 

So far, connecting to MASTER-DeleGate via SOCKS-proxy is supported,
but connecting to MASTER via SSLTUNNEL (CONNECT/HTTP-proxy) is not yet.
The enclosed patch (for DeleGate/8.0.7) will enable it with following
parameters.

  CONNECT="https:delegate:master_delegate"
  SSLTUNNEL=proxy_server:port
  MASTER=master_delegate:8008

The CONNECT specifies using SSLTUNNEL (via "https" proxy) to reach
master_delegate (in "delegate" protocol).

Cheers,
Yutaka
--
  @ @ Yutaka Sato <y.sato@delegate.org> http://www.delegate.org/y.sato/
 ( - ) National Institute of Advanced Industrial Science and Technology (AIST)
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

*** ../../dgs/delegate8.0.7/src/master.c	Fri Oct 18 13:58:21 2002
--- master.c	Fri Oct 25 01:02:00 2002
***************
*** 1838,1843 ****
--- 1838,1848 ----
  			sv1log("%s '%s' via SOCKS = %d\n",where,proto,sock);
  			return sock;
  		}
+ 		if( strchr(orders,C_SSLTUNNEL) ){
+ 			sock = ConnectViaSSLtunnel(Conn,host,port);
+ 			sv1log("%s '%s' via SSLtunnel = %d\n",where,proto,sock);
+ 			return sock;
+ 		}
  	}
  	return client_open(where,proto,host,port);
  }


  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V