Article delegate-en/1954 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A1952@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: proxy chain
25 Oct 2002 07:08:40 GMT y.sato@delegate.org (Yutaka Sato)


On 10/25/02(01:14) I wrote in <_A1952@delegate-en.ML_>
 |On 10/23/02(19:37) you "Hantke, Jens (GOD)" <ptqdqbdyi-c2jtqbgqqbvr.ml@ml.delegate.org>
 |wrote in <_A1948@delegate-en.ML_>
 | |I want to encrypt communication between two Delegates.
 | |client --http--> local_delegate --https--> master_delegate --http--> server
 | |This works fine with the following parameters:
 | |
 | |local delegate:
 | |delegated -P8008 -vt FMD="sslway" MASTER="master-delegate:8008"
 | |DGROOT="path/to/delegate"
 | |
 | |master delegate:
 | |delegated -P8008 -vt FCL="sslway" DGROOT="path/to/delegate"
 | |
 | |Now I want to add another (non delegate) proxy server:
 | |client --http--> local_delegate --https--> PROXY_SERVER --https-->
 | |master_delegate --http--> server
 | |
 | |is there a way to route the local delegate's requests over the proxy_server
 | |to the master-delegate? I tried SSLTUNNEL="proxy_server:port", but that
 | |seems to be ignored. 
 |
 |So far, connecting to MASTER-DeleGate via SOCKS-proxy is supported,
 |but connecting to MASTER via SSLTUNNEL (CONNECT/HTTP-proxy) is not yet.
 |The enclosed patch (for DeleGate/8.0.7) will enable it with following
 |parameters.
 |
 |  CONNECT="https:delegate:master_delegate"
 |  SSLTUNNEL=proxy_server:port
 |  MASTER=master_delegate:8008
 |
 |The CONNECT specifies using SSLTUNNEL (via "https" proxy) to reach
 |master_delegate (in "delegate" protocol).

Another solution, without modifying the code of DeleGate but a little
bit eneffecitve, is using one more DeleGate locally just for relaying
toward MASTER via SSLTUNNEL.

local DeleGates:
 delegated -P8008 FMD="sslway" MASTER="localhost:8009"
 delegated -P8009 SERVER=tcprelay://master_delegate:8008 SSLTUNNEL=proxy_server:port

Cheers,
Yutaka
--
  @ @ Yutaka Sato <y.sato@delegate.org> http://www.delegate.org/y.sato/
 ( - ) National Institute of Advanced Industrial Science and Technology (AIST)
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V