Opened 8 years ago

Closed 17 months ago

#423 closed enhancement (fixed)

reseeding doesnt support SSL proxy

Reported by: walking Owned by: zzz
Priority: minor Milestone: 0.9.33
Component: www/reseed Version: 0.9.30
Keywords: reseed, ssl, proxy Cc:
Parent Tickets:

Description


Subtickets

Change History (13)

comment:1 Changed 8 years ago by walking

reseeding doesnt support SSL proxy

comment:2 Changed 8 years ago by zzz

  • Component changed from router/general to router/netdb
  • Milestone changed from 0.8.4 to 0.8.6
  • Owner set to zzz
  • Status changed from new to accepted

comment:3 Changed 8 years ago by zzz

  • Milestone changed from 0.8.6 to 0.9
  • Priority changed from major to minor

comment:4 Changed 8 years ago by zzz

this requires 1) proxy support in SSLEepGet; 2) Reseeder.java changes; 3) configreseed.jsp changes

comment:5 Changed 8 years ago by zzz

step 3) is done but commented out until 1) and 2) are done.

comment:6 Changed 6 years ago by zzz

  • Milestone changed from 0.9 to 0.9.8

comment:7 Changed 4 years ago by str4d

  • Milestone 0.9.8 deleted

comment:8 Changed 23 months ago by backup

  • Component changed from router/netdb to www/reseed
  • Version changed from 0.8.3 to 0.9.30

reported by user "reseed":
since we have only https reseeds the proxy won't work - currently only http support implemented.
(http://zzz.i2p/topics/2302-request-for-comments-circumvent-blockade-of-reseed-servers-in-china)

Proposal:

  • short term: deactivation/hiding of proxy settings in routerconsole
  • long term: implement https proxy support

comment:9 Changed 17 months ago by zzz

http proxy settings hidden in 3a50d02bfe51b69df328575491d456f83f1e631c to be 0.9.32-3 see #2007

https proxy settings in place in configreseed.jsp but commented out, and not yet implemented elsewhere

comment:10 Changed 17 months ago by zzz

  • Milestone set to 0.9.33

testing an implementation now

comment:11 Changed 17 months ago by zzz

In 488420956a92d64eee3f1b649ffb2031c010c81c 0.9.32-3

Leaving open for possible doc updates to match on /configreseed and on website

Other proxy types unimplemented in this change, see #1130 #1841 #2038, but I did add a parameter for proxy type in the constructor.

I tested with a few proxies listed here http://spys.one/en/

All seem to be HTTP to the proxy, and support CONNECT, so I guess that's called an HTTPS proxy. If there's any that are SSL to the proxy, I don't know what you call that, and it's not what I implemented. Also unimplemented - proxy auth. If proxies that require auth are out there, they wouldn't be publicly listed, so I have no way to test.

comment:12 Changed 17 months ago by zzz

Enhanced help on /configreseed in 4d98ff882b2f48b07b9b0ee8a84d4ff138ebe4af to be 0.9.32-5

Leaving open to add a paragraph to the website

comment:13 Changed 17 months ago by zzz

  • Resolution set to fixed
  • Status changed from accepted to closed

Added info to FAQ in 129c2b97273a5da7cef62b77a16ec759675e01ac

Note: See TracTickets for help on using tickets.