Opened 9 years ago

Closed 2 years ago

#423 closed enhancement (fixed)

reseeding doesnt support SSL proxy

Reported by: walking Owned by: zzz
Priority: minor Milestone: 0.9.33
Component: www/reseed Version: 0.9.30
Keywords: reseed, ssl, proxy Cc:
Parent Tickets: Sensitive: no

Description


Subtickets

Change History (13)

comment:1 Changed 9 years ago by walking

reseeding doesnt support SSL proxy

comment:2 Changed 9 years ago by zzz

Component: router/generalrouter/netdb
Milestone: 0.8.40.8.6
Owner: set to zzz
Status: newaccepted

comment:3 Changed 8 years ago by zzz

Milestone: 0.8.60.9
Priority: majorminor

comment:4 Changed 8 years ago by zzz

this requires 1) proxy support in SSLEepGet; 2) Reseeder.java changes; 3) configreseed.jsp changes

comment:5 Changed 8 years ago by zzz

step 3) is done but commented out until 1) and 2) are done.

comment:6 Changed 7 years ago by zzz

Milestone: 0.90.9.8

comment:7 Changed 5 years ago by str4d

Milestone: 0.9.8

comment:8 Changed 2 years ago by backup

Component: router/netdbwww/reseed
Version: 0.8.30.9.30

reported by user "reseed":
since we have only https reseeds the proxy won't work - currently only http support implemented.
(http://zzz.i2p/topics/2302-request-for-comments-circumvent-blockade-of-reseed-servers-in-china)

Proposal:

  • short term: deactivation/hiding of proxy settings in routerconsole
  • long term: implement https proxy support

comment:9 Changed 2 years ago by zzz

http proxy settings hidden in 3a50d02bfe51b69df328575491d456f83f1e631c to be 0.9.32-3 see #2007

https proxy settings in place in configreseed.jsp but commented out, and not yet implemented elsewhere

comment:10 Changed 2 years ago by zzz

Milestone: 0.9.33

testing an implementation now

comment:11 Changed 2 years ago by zzz

In 488420956a92d64eee3f1b649ffb2031c010c81c 0.9.32-3

Leaving open for possible doc updates to match on /configreseed and on website

Other proxy types unimplemented in this change, see #1130 #1841 #2038, but I did add a parameter for proxy type in the constructor.

I tested with a few proxies listed here http://spys.one/en/

All seem to be HTTP to the proxy, and support CONNECT, so I guess that's called an HTTPS proxy. If there's any that are SSL to the proxy, I don't know what you call that, and it's not what I implemented. Also unimplemented - proxy auth. If proxies that require auth are out there, they wouldn't be publicly listed, so I have no way to test.

comment:12 Changed 2 years ago by zzz

Enhanced help on /configreseed in 4d98ff882b2f48b07b9b0ee8a84d4ff138ebe4af to be 0.9.32-5

Leaving open to add a paragraph to the website

comment:13 Changed 2 years ago by zzz

Resolution: fixed
Status: acceptedclosed
Note: See TracTickets for help on using tickets.